Browse CVEs

MEDIUM 6.5 CVE-2022-42343 Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead… Campaign 7.3.2 / 8.4.2+ Fix from $1,6002022-12-16 MEDIUM 5.4 CVE-2022-35696 Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack… Experience Manager 6.5.15.0 / 2022.10.0+ Fix from $1,6002022-12-16 MEDIUM 5.4 CVE-2022-42360 Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack… Experience Manager 6.5.15.0 / 2022.10.0+ Fix from $1,6002022-12-16 MEDIUM 5.4 CVE-2022-42366 Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack… Experience Manager 6.5.15.0 / 2022.10.0+ Fix from $1,6002022-12-16 MEDIUM 5.4 CVE-2022-42367 Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack… Experience Manager 6.5.15.0 / 2022.10.0+ Fix from $1,6002022-12-16 MEDIUM 5.4 CVE-2022-35694 Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack… Experience Manager 6.5.15.0 / 2022.10.0+ Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-38435 Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result i… Illustrator after 26.4 Fix from $1,9502022-10-25 HIGH 7.8 CVE-2022-38436 Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted fil… Illustrator after 26.4 Fix from $1,9502022-10-25 HIGH 8.8 CVE-2022-42344 Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerabili… Commerce 2.3.7 / 2.4.3+ Fix from $1,9502022-10-20 HIGH 7.8 CVE-2022-42339 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability t… Acrobat Dc 20.005.30407 / 22.003.20258+ Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-42340EPSS 34% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could re… Coldfusion Mitigation only Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-42341EPSS 36% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference… Coldfusion Mitigation only Fix from $1,9502022-10-14 MEDIUM 5.5 CVE-2022-42342 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that coul… Acrobat Dc 20.005.30407 / 22.003.20258+ Fix from $1,6002022-10-14 HIGH 7.8 CVE-2022-38447 Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curr… Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.8 CVE-2022-38448 Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curr… Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.8 CVE-2022-38450 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability t… Acrobat Dc 20.005.30407 / 22.003.20258+ Fix from $1,9502022-10-14 MEDIUM 5.5 CVE-2022-38449 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that coul… Acrobat Dc 20.005.30407 / 22.003.20258+ Fix from $1,6002022-10-14 HIGH 7.8 CVE-2022-38441 Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the … Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.8 CVE-2022-38442 Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curr… Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.8 CVE-2022-38444 Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curr… Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.8 CVE-2022-38445 Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curr… Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.8 CVE-2022-38446 Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curr… Dimension 3.4.6+ Fix from $1,9502022-10-14 MEDIUM 5.5 CVE-2022-38443 Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul… Dimension 3.4.6+ Fix from $1,6002022-10-14 HIGH 7.8 CVE-2022-38440 Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the … Dimension 3.4.6+ Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-38422EPSS 44% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Dir… Coldfusion Mitigation only Fix from $1,9502022-10-14 HIGH 7.2 CVE-2022-38421EPSS 79% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Dir… Coldfusion Patch available Fix from $1,9502022-10-14 HIGH 7.2 CVE-2022-38424EPSS 45% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Dir… Coldfusion Mitigation only Fix from $1,9502022-10-14 MEDIUM 5.5 CVE-2022-38437 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Use After Free vulnerability that could lea… Acrobat Dc 20.005.30407 / 22.003.20258+ Fix from $1,6002022-10-14 CRITICAL 9.8 CVE-2022-35710EPSS 43% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could r… Coldfusion Patch available Fix from $2,3002022-10-14 CRITICAL 9.8 CVE-2022-35711EPSS 73% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could re… Coldfusion Patch available Fix from $2,3002022-10-14