Vulnerabilities > Adobe > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-09-10 CVE-2020-9735 Cross-site Scripting vulnerability in Adobe Experience Manager
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields.
network
low complexity
adobe CWE-79
4.8
2020-09-10 CVE-2020-9734 Cross-site Scripting vulnerability in Adobe Experience Manager
The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.1 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component.
network
low complexity
adobe CWE-79
5.4
2020-08-19 CVE-2020-9712 Incorrect Authorization vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability.
local
low complexity
adobe CWE-863
5.5
2020-08-19 CVE-2020-9703 Resource Exhaustion vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a stack exhaustion vulnerability.
local
low complexity
adobe CWE-400
5.5
2020-08-19 CVE-2020-9702 Resource Exhaustion vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a stack exhaustion vulnerability.
local
low complexity
adobe CWE-400
5.5
2020-08-19 CVE-2020-9697 Memory Leak vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability.
local
low complexity
adobe CWE-401
5.5
2020-08-19 CVE-2020-9696 Unspecified vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability.
local
low complexity
adobe
5.5
2020-07-22 CVE-2020-9686 Out-of-bounds Read vulnerability in Adobe Photoshop and Photoshop CC
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability.
network
low complexity
adobe CWE-125
6.5
2020-07-22 CVE-2020-9679 Out-of-bounds Read vulnerability in Adobe Prelude 9.0
Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability.
network
low complexity
adobe CWE-125
6.5
2020-07-22 CVE-2020-9663 Path Traversal vulnerability in Adobe Reader
Adobe Reader Mobile versions 20.0.1 and earlier have a directory traversal vulnerability.
network
low complexity
adobe CWE-22
5.3