7.1

CVE-2008-4820

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Flash Player Version <= 9.0.124.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.69.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.39.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.16
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.16 Editionwindows
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.18d60
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.20
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.20.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28.0 Editionmac_os_x
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.31
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.31.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.45.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.47.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.48.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.112.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.114.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.115.0
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.95% 0.873
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.