Livecycle Es4

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-28500 Apr 06, 21:15 CRITICAL Act Now

A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Deserialization Adobe Livecycle Es4

NVD

CVSS 3.1

9.8

EPSS

1.4%

CVE-2023-28500

EPSS 1% CVSS 9.8

CRITICAL Act Now

A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Java Deserialization +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy