deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-33149
Published: 2022-05-12
Description: Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00648.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-40399
Published: 2022-05-12
Description: An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS file can cause a use-after-free condition, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://security.wps.cn/notices/28; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1412; https://security.wps.cn/notices/28
CVE: CVE-2022-0004
Published: 2022-05-12
Description: Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html
CVE: CVE-2022-0005
Published: 2022-05-12
Description: Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.
CVSS Score: 2.4 (LOW)
CWE: CWE-319, CWE-319
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html
CVE: CVE-2022-21128
Published: 2022-05-12
Description: Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00661.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00661.html
CVE: CVE-2022-21131
Published: 2022-05-12
Description: Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html
CVE: CVE-2022-21136
Published: 2022-05-12
Description: Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html
CVE: CVE-2022-21147
Published: 2022-05-12
Description: An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-823, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1452; https://www.estsecurity.com/public/product/alyac; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1452
CVE: CVE-2022-21151
Published: 2022-05-12
Description: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2022/dsa-5178; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html
CVE: CVE-2022-21182
Published: 2022-05-12
Description: A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1472; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1472
CVE: CVE-2022-21237
Published: 2022-05-12
Description: Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html
CVE: CVE-2022-21238
Published: 2022-05-12
Description: A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1469; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1469
CVE: CVE-2022-21809
Published: 2022-05-12
Description: A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can upload a malicious file to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-377, CWE-434
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1468; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1468
CVE: CVE-2022-22139
Published: 2022-05-12
Description: Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00663.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00663.html
CVE: CVE-2022-24297
Published: 2022-05-12
Description: Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html
CVE: CVE-2022-24382
Published: 2022-05-12
Description: Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00654.html
CVE: CVE-2022-24910
Published: 2022-05-12
Description: A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1471; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1471
CVE: CVE-2022-25172
Published: 2022-05-12
Description: An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie misses the HttpOnly flag, making it accessible via JavaScript and thus allowing an attacker, able to perform an XSS attack, to steal the session cookie.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1004, CWE-732
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1470; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1470
CVE: CVE-2022-25995
Published: 2022-05-12
Description: A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-489
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1477; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1477
CVE: CVE-2022-26002
Published: 2022-05-12
Description: A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of malicious packets to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1476; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1476
CVE: CVE-2022-26007
Published: 2022-05-12
Description: An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1475; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1475
CVE: CVE-2022-26020
Published: 2022-05-12
Description: An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-321, CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1474; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1474
CVE: CVE-2022-26042
Published: 2022-05-12
Description: An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1478; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1478
CVE: CVE-2022-26075
Published: 2022-05-12
Description: An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1500; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1500
CVE: CVE-2022-26085
Published: 2022-05-12
Description: An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1473; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1473
CVE: CVE-2022-26420
Published: 2022-05-12
Description: An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1499; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1499
CVE: CVE-2022-26510
Published: 2022-05-12
Description: A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1495; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1495
CVE: CVE-2022-26518
Published: 2022-05-12
Description: An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1501; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1501
CVE: CVE-2022-26780
Published: 2022-05-12
Description: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_init` function. Controlling the `user_define_timeout` nvram variable can lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481
CVE: CVE-2022-26781
Published: 2022-05-12
Description: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_print` function. Controlling the `user_define_timeout` nvram variable can lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481
CVE: CVE-2022-26782
Published: 2022-05-12
Description: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_set_item` function. Controlling the `user_define_timeout` nvram variable can lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481
CVE: CVE-2022-27172
Published: 2022-05-12
Description: A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-259, CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1496; https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1496
CVE: CVE-2021-26351
Published: 2022-05-12
Description: Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26361
Published: 2022-05-12
Description: A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
CVSS Score: 5.5 (MEDIUM)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26362
Published: 2022-05-12
Description: A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.
CVSS Score: 7.1 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26366
Published: 2022-05-12
Description: An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
CVSS Score: 7.1 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26369
Published: 2022-05-12
Description: A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2022-29363
Published: 2022-05-12
Description: Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to getshell via writing arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/qinggan/phpok/issues/12; https://github.com/qinggan/phpok/issues/12
CVE: CVE-2021-22531
Published: 2022-05-12
Description: A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html; https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html
CVE: CVE-2021-26317
Published: 2022-05-12
Description: Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26363
Published: 2022-05-12
Description: A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.
CVSS Score: 4.4 (MEDIUM)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26368
Published: 2022-05-12
Description: Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-345
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26386
Published: 2022-05-12
Description: A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2022-28818
Published: 2022-05-12
Description: ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/coldfusion/apsb22-22.html; https://helpx.adobe.com/security/products/coldfusion/apsb22-22.html
CVE: CVE-2022-28819
Published: 2022-05-12
Description: Adobe Character Animator versions 4.4.2 (and earlier) and 22.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious SVG file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/character_animator/apsb22-21.html; https://helpx.adobe.com/security/products/character_animator/apsb22-21.html