CVE-2017-3087

CWE-200 — Information Exposure5 documents5 sources
Severity
7.5HIGH
EPSS
4.2%
top 11.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Captivate
Timeline
PublishedJun 20
Latest updateMay 17

Description

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5adobe_captivate_9_and_earlier.Adobe Captivate 9 and earlier.

🔴Vulnerability Details

2
GHSA
GHSA-45c6-f49w-2r2g: Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate↗2022-05-17
▶
CVEList
CVE-2017-3087: Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate↗2017-06-20
▶

💥Exploits & PoCs

1
Exploit-DB
HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion↗2017-04-25
▶

💬Community

1
Bugzilla
CVE-2017-11571 fontforge: Stack-buffer overflow in addnibble function↗2017-07-26
▶
CVE-2017-3087 (HIGH CVSS 7.5) | Adobe Captivate versions 9 and earl | cvebase.io