CVE-2024-30300

CRITICAL

Adobe Framemaker Publishing Server <= 2022.2 - Information Exposure

Title source: llm
STIX 2.1

Description

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user privileges. Exploitation of this issue does not require user interaction.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0160
EPSS Percentile 81.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-200
Status published
Products (3)
adobe/framemaker_publishing_server 2020 (4 CPE variants)
adobe/framemaker_publishing_server 2022 (3 CPE variants)
adobe/framemaker_publishing_server < 2020
Published Jun 13, 2024
Tracked Since Feb 18, 2026