Vulnerabilities in Adobe Systems Incorporated

144 results
Vexday analysis

Com 144 CVEs catalogadas e nenhuma atualmente listada no catálogo KEV da CISA, a taxa de exploração ativa da Adobe Systems Incorporated neste conjunto está abaixo da média geral do catálogo. O único CVE de maior destaque é CVE-2017-11211, que concentra o maior escore EPSS observado (0,2707), indicando probabilidade não negligenciável de exploração, apesar da ausência de confirmação ativa. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), o que sugere atenção contínua a controles de sanitização de entrada e saída nas implementações. A ausência de novas CVEs nos últimos 90 dias e o baixo volume de explorações confirmadas reduzem a urgência imediata, mas o PoC público disponível para a vulnerabilidade crítica merece monitoramento por equipes responsáveis por ambientes que ainda executam versões afetadas.

CVE-2020-24445CRITICALCross-site Scripting Vulnerability in Commenting Function of Adobe Experience Manager (AEM)EPSS 2.5%CVE-2019-8144—A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payloEPSS 2.5%CVE-2019-8135—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection thEPSS 2.5%CVE-2019-8141—A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An autEPSS 2.4%CVE-2019-8149—Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. EPSS 2.1%CVE-2019-8116—Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. EPSS 1.9%CVE-2019-8110—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user cEPSS 1.9%CVE-2019-8137—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user wEPSS 1.9%CVE-2019-8150—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user wEPSS 1.9%CVE-2019-8122—A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An autEPSS 1.9%CVE-2019-8111—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user cEPSS 1.9%CVE-2019-8154—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user wEPSS 1.9%CVE-2019-8119—A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An autEPSS 1.9%CVE-2019-8114—A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2EPSS 1.9%CVE-2019-8125—A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration paEPSS 1.7%CVE-2019-8091—A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to acceEPSS 1.7%CVE-2019-8151—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user wEPSS 1.7%CVE-2019-8156—A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authentEPSS 1.7%CVE-2019-8153—A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. SucEPSS 1.5%CVE-2019-8230—In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settinEPSS 1.4%