Adobe Content Server vulnerabilities

3 CVEs affecting Adobe Content Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1020, published 2002-10-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1019, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp.
CVE-2002-1018, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by…
CVE-2002-1020, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the…