CPE Details
Adobe Dreamweaver 20.2.1
20.2.1
2021-02-16
12h29 +00:00
12h29 +00:00
2021-02-24
17h17 +00:00
17h17 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:adobe:dreamweaver:20.2.1:*:*:*:*:*:*:*
Informations
Vendor
adobeProduct
dreamweaverVersion
20.2.1Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 7.8 |
Haute |
||
| Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does require user interaction. | 7.8 |
Haute |
||
| Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637. | 4.3 |
