Adobe Framemaker Publishing Server vulnerabilities

4 CVEs affecting Adobe Framemaker Publishing Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30300, published 2024-06-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44324, published 2023-11-17. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthenticated attacker can…
CVE-2024-20738, published 2024-02-15. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this…
CVE-2024-30299, published 2024-06-13. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit…
CVE-2024-30300, published 2024-06-13. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could…