CVE-2024-30299

CRITICAL

Adobe Framemaker Publishing Server <= 2022.2 - Improper Authentication

Title source: llm
STIX 2.1

Description

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.

References (1)

Core 1

Scores

CVSS v3 10.0
EPSS 0.0152
EPSS Percentile 81.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-287
Status published
Products (3)
adobe/framemaker_publishing_server 2020 (4 CPE variants)
adobe/framemaker_publishing_server 2022 (3 CPE variants)
adobe/framemaker_publishing_server < 2020
Published Jun 13, 2024
Tracked Since Feb 18, 2026