CVE-2020-9636
published 2020-06-12CVE-2020-9636: Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
PriorityP344high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
3.94%
89.2th percentile
Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_framemaker | — | — |
| adobe | framemaker | <= 2019.0.5 | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_oracle9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g393-ppfh-9j3h: Adobe Framemaker versions 2019
ghsa_unreviewed·2022-05-24
CVE-2020-9636 [MEDIUM] CWE-119 GHSA-g393-ppfh-9j3h: Adobe Framemaker versions 2019
Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Oracle
Oracle Oracle Systems Risk Matrix: Operating System Image — CVE-2019-9636
vendor_oracle·2020-01-15·CVSS 9.8
CVE-2019-9636 [CRITICAL] Oracle Oracle Systems Risk Matrix: Operating System Image — CVE-2019-9636
Oracle Oracle Systems Risk Matrix: Operating System Image vulnerability
CVE: CVE-2019-9636
CVSS: 9.8
Protocol: Multiple
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2020 (JAN 2020)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-06-12
Published