Vulnerabilities in Adobe Systems Incorporated

144 results
Vexday analysis

Com 144 CVEs catalogadas e nenhuma atualmente listada no catálogo KEV da CISA, a taxa de exploração ativa da Adobe Systems Incorporated neste conjunto está abaixo da média geral do catálogo. O único CVE de maior destaque é CVE-2017-11211, que concentra o maior escore EPSS observado (0,2707), indicando probabilidade não negligenciável de exploração, apesar da ausência de confirmação ativa. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), o que sugere atenção contínua a controles de sanitização de entrada e saída nas implementações. A ausência de novas CVEs nos últimos 90 dias e o baixo volume de explorações confirmadas reduzem a urgência imediata, mas o PoC público disponível para a vulnerabilidade crítica merece monitoramento por equipes responsáveis por ambientes que ainda executam versões afetadas.

CVE-2019-8231—In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can exeEPSS 1.4%CVE-2019-8229—In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes EPSS 1.4%CVE-2019-8093—An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user EPSS 1.3%CVE-2019-8158—An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craftEPSS 1.3%CVE-2019-8127—A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privEPSS 1.3%CVE-2019-8121—An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento EPSS 1.2%CVE-2019-8136—An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Magento 2 codebase leveraEPSS 1.2%CVE-2019-8108—Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. EPSS 1.2%CVE-2019-8130—A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with store manipulation EPSS 1.0%CVE-2019-8134—A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with marketing privilegeEPSS 1.0%CVE-2019-8133—A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with privileges to genEPSS 1.0%CVE-2019-8124—An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior tEPSS 1.0%CVE-2019-8113—Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the cEPSS 0.9%CVE-2019-8143—A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with acceEPSS 0.9%CVE-2019-8107—An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated useEPSS 0.9%CVE-2019-8126—An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin EPSS 0.9%CVE-2019-8109—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user cEPSS 0.9%CVE-2019-8232—In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, and Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an authentiEPSS 0.9%CVE-2019-8123—An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, MagentoEPSS 0.8%CVE-2019-8090—An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An EPSS 0.8%