CVE-2020-3798

CWE-200 — Information Exposure3 documents3 sources
Severity
6.5MEDIUM
EPSS
2.4%
top 14.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Digital EditionsAdobe Adobe Digital Editions
Timeline
PublishedJun 26
Latest updateMay 24

Description

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. Successful exploitation could lead to information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDadobe/digital_editions4.5.11.187212
▶CVEListV5adobe/adobe_digital_editions4.5.11.187212 and below versions

🔴Vulnerability Details

2
GHSA
GHSA-96mx-cm63-f354: Adobe Digital Editions versions 4↗2022-05-24
▶
CVEList
CVE-2020-3798: Adobe Digital Editions versions 4↗2020-06-26
▶