What is CVE-2024-47422?

CVE-2024-47422 is a high-severity vulnerability in Adobe Framemaker, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2024-10-09.

How severe is CVE-2024-47422?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Adobe Framemaker

CVE-2024-47422

Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious path into the se…

EPSS: 0.003 (25.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Adobe Framemaker — versions 0
Adobe Framemaker
Microsoft Windows

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

psirt@adobe.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-47422?: CVE-2024-47422 is a high-severity vulnerability in Adobe Framemaker, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2024-10-09.
How severe is CVE-2024-47422?: High severity. CVSS v3 base score is 7.8 out of 10.