CVE-2009-1365: Adobe Flash Media Server

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests.

Affected products

• Adobe Flash Media Server: up to and including 3.0.3; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2009-05-01. Last modified 2026-06-16.