Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
heir browsers, the malicious code gets executed in the background of the application and renders content inaccessible. 6.14 P3 (6.14.0.3) is also a fixed release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
CVE ID: CVE-2024-34092 State: PUBLISHED Published: 2024-05-06T00:00:00.000Z Last Updated: 2025-03-25T16:17:57.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
CVE ID: CVE-2024-34093 State: PUBLISHED Published: 2024-05-06T00:00:00 Last Updated: 2024-08-02T02:42:59.989Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header Bypass vulnerability. An unauthenticated attacker could potentially bypass intended whitelisting when X-Forwarded-For header is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://archerirm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/72096
rm.com - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
CVE ID: CVE-2024-34094 State: PUBLISHED Published: 2024-05-15T10:00:07.983Z Last Updated: 2024-08-02T02:42:59.892Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-2
CVE ID: CVE-2024-34095 State: PUBLISHED Published: 2024-05-15T10:00:12.362Z Last Updated: 2024-08-02T02:42:59.886Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-2
CVE ID: CVE-2024-34096 State: PUBLISHED Published: 2024-05-15T10:00:10.936Z Last Updated: 2024-08-02T02:42:59.884Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-2
CVE ID: CVE-2024-34097 State: PUBLISHED Published: 2024-05-15T10:00:09.418Z Last Updated: 2024-08-02T02:42:59.874Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-2
CVE ID: CVE-2024-34098 State: PUBLISHED Published: 2024-05-15T10:00:15.985Z Last Updated: 2024-08-02T02:43:00.452Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-20 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrob
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-29.html
CVE ID: CVE-2024-34099 State: PUBLISHED Published: 2024-05-15T10:00:11.648Z Last Updated: 2024-08-02T02:43:00.060Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-284 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acroba
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-29.html
CVE ID: CVE-2024-34100 State: PUBLISHED Published: 2024-05-15T10:00:18.857Z Last Updated: 2024-08-02T02:42:59.965Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-2
CVE ID: CVE-2024-34101 State: PUBLISHED Published: 2024-05-15T10:00:18.105Z Last Updated: 2024-08-02T02:42:59.927Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb24-29.html
CVE ID: CVE-2024-34102 State: PUBLISHED Published: 2024-06-13T09:04:56.093Z Last Updated: 2025-10-21T22:56:22.223Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-611 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnric
nal entities. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html - https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102
CVE ID: CVE-2024-34103 State: PUBLISHED Published: 2024-06-13T09:05:01.465Z Last Updated: 2024-08-02T02:42:59.937Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-287 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction, but attack complexity is high. Additional Analyst Notes: - CISA ADP Vulnrichment: -
does not require user interaction, but attack complexity is high. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34104 State: PUBLISHED Published: 2024-06-13T09:04:56.852Z Last Updated: 2024-09-17T11:08:38.931Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-285 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and integrity impact. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnr
tegrity impact. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34105 State: PUBLISHED Published: 2024-06-13T09:04:57.617Z Last Updated: 2024-08-02T02:42:59.883Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-79 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Ref
he page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34106 State: PUBLISHED Published: 2024-06-13T09:05:02.253Z Last Updated: 2024-08-02T02:42:59.989Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-863 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions with the privileges of another user. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Con
on of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34107 State: PUBLISHED Published: 2024-06-13T09:04:58.392Z Last Updated: 2024-09-17T11:08:47.953Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-284 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and view minor unauthorised information. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
ue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34108 State: PUBLISHED Published: 2024-06-13T09:04:55.355Z Last Updated: 2024-08-07T14:47:37.071Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-20 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.
ope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34109 State: PUBLISHED Published: 2024-06-13T09:05:00.703Z Last Updated: 2024-09-17T11:08:17.339Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-20 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/produc
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34110 State: PUBLISHED Published: 2024-06-13T09:04:59.918Z Last Updated: 2024-08-02T02:43:00.355Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-434 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A high-privilege attacker could exploit this vulnerability by uploading a malicious file to the system, which could then be executed. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnr
en be executed. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34111 State: PUBLISHED Published: 2024-06-13T09:04:59.166Z Last Updated: 2024-08-07T14:51:52.418Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-918 Description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
itation of this issue does not require user interaction.. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb24-40.html
CVE ID: CVE-2024-34112 State: PUBLISHED Published: 2024-06-13T11:27:15.891Z Last Updated: 2024-08-02T02:42:59.893Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-284 Description: ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could exploit this vulnerability to gain unauthorized access to sensitive files or data. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/pr
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/coldfusion/apsb24-41.html
CVE ID: CVE-2024-34113 State: PUBLISHED Published: 2024-06-13T11:27:15.139Z Last Updated: 2024-09-16T12:55:16.320Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-261 Description: ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the confidentiality of password data. An attacker could exploit this weakness to decrypt or guess passwords, potentially gaining unauthorized acces
word data. An attacker could exploit this weakness to decrypt or guess passwords, potentially gaining unauthorized access to protected resources. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/coldfusion/apsb24-41.html
CVE ID: CVE-2024-34115 State: PUBLISHED Published: 2024-06-13T11:25:39.069Z Last Updated: 2024-08-02T02:43:00.080Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-787 Description: Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/substance3d_stager/
A ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb24-43.html
CVE ID: CVE-2024-34116 State: PUBLISHED Published: 2024-06-13T11:26:35.460Z Last Updated: 2024-08-07T14:55:12.015Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Adobe Products: Creative Cloud Desktop Problem Types: CWE-427 Description: Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
ssue requires user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://helpx.adobe.com/security/products/creative-cloud/apsb24-44.html
CVE ID: CVE-2024-34117 State: PUBLISHED Published: 2024-08-14T14:58:55.823Z Last Updated: 2024-09-18T14:41:59.036Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Desktop Problem Types: CWE-416 Description: Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb24-49.html
CVE ID: CVE-2024-34118 State: PUBLISHED Published: 2024-08-14T14:56:18.459Z Last Updated: 2024-08-14T17:22:27.451Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-20 Description: Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb24-45.html
CVE ID: CVE-2024-34119 State: PUBLISHED Published: 2024-06-13T07:52:53.427Z Last Updated: 2024-10-07T12:26:08.174Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
CVE ID: CVE-2024-34120 State: PUBLISHED Published: 2024-06-13T07:53:48.828Z Last Updated: 2024-10-07T12:26:19.262Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
CVE ID: CVE-2024-34121 State: PUBLISHED Published: 2024-09-13T08:37:31.443Z Last Updated: 2024-09-13T14:27:57.008Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-190 Description: Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb24-66.html