Browse high-severity CVEs

Coldfusion CRITICAL 9.8

CVE-2023-38203 KEVEPSS 97%

Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vu…

Patch available

Fix from $2,300 2023-07-20

Coldfusion CRITICAL 9.8

CVE-2023-29300 KEVEPSS 100%

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untruste…

Mitigation only

Fix from $2,300 2023-07-12

Livecycle Es4 CRITICAL 9.8

CVE-2023-28500

A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operati…

Fix: 11.0.1+

Fix from $2,300 2023-04-06

Coldfusion CRITICAL 9.8

CVE-2023-26359 KEVEPSS 17%

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerabil…

Patch available

Fix from $2,300 2023-03-23

Coldfusion CRITICAL 9.8

CVE-2022-35710EPSS 43%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could r…

Patch available

Fix from $2,300 2022-10-14

Coldfusion CRITICAL 9.8

CVE-2022-35711EPSS 73%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could re…

Patch available

Fix from $2,300 2022-10-14

Coldfusion CRITICAL 9.8

CVE-2022-35712EPSS 37%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could re…

Patch available

Fix from $2,300 2022-10-14

Coldfusion CRITICAL 9.8

CVE-2022-38418EPSS 80%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Dir…

Patch available

Fix from $2,300 2022-10-14

Coldfusion CRITICAL 9.8

CVE-2022-35690EPSS 72%

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could r…

Patch available

Fix from $2,300 2022-10-14

Commerce CRITICAL 9.8

CVE-2022-34256

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerabilit…

Fix: 2.3.7 / 2.4.3+

Fix from $2,300 2022-08-16

Commerce CRITICAL 9.8

CVE-2022-24086 KEVEPSS 99%

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the check…

Fix: 2.3.0+

Fix from $2,300 2022-02-16

Experience Manager CRITICAL 9.8

CVE-2021-40722

AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that c…

Fix: after 6.5.10.0

Fix from $2,300 2022-01-13

Connect CRITICAL 9.8

CVE-2021-40719

Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation wh…

Fix: after 11.2.3

Fix from $2,300 2021-10-21

Ops Cli CRITICAL 9.8

CVE-2021-40720EPSS 10%

Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the che…

Fix: 2.0.5+

Fix from $2,300 2021-10-15

Adobe Commerce CRITICAL 9.8

CVE-2021-36020

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the '…

Fix: after 2.4.2

Fix from $2,300 2021-09-01

Experience Manager CRITICAL 9.0

CVE-2020-24445

AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be…

Fix: after 6.5.6.0

Fix from $2,300 2020-12-10

Experience Manager CRITICAL 9.0

CVE-2020-9732

The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Auth…

Fix: after 6.5.5.0

Fix from $2,300 2020-09-10

Creative Cloud Desktop Application CRITICAL 9.8

CVE-2020-9682

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to a…

Fix: after 5.1

Fix from $2,300 2020-07-17

Creative Cloud CRITICAL 9.8

CVE-2020-9669

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lea…

Fix: after 5.1

Fix from $2,300 2020-07-17

Creative Cloud Desktop Application CRITICAL 9.8

CVE-2020-9670

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to p…

Fix: after 5.1

Fix from $2,300 2020-07-17

Creative Cloud Desktop Application CRITICAL 9.8

CVE-2020-9671

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead…

Fix: after 5.1

Fix from $2,300 2020-07-17

Photoshop 2020 CRITICAL 9.8

CVE-2020-3783

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a heap corruption vulnerability. Successful ex…

Fix: after 21.1