Adobe Flex SDK vulnerabilities

3 CVEs affecting Adobe Flex SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2461, published 2011-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-3311, published 2006-09-12. Medium severity, CVSS 5.1. EPSS: 17.9% chance of exploitation in the next 30 days. Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically…
CVE-2009-1879, published 2009-08-21. Low severity, CVSS 2.6. EPSS: 8.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified…
CVE-2011-2461, published 2011-12-01. Medium severity, CVSS 4.3. EPSS: 7.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from…