5

CVE-2014-8452

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Acrobat Reader Version10.0
Adobe ≫ Acrobat Reader Version10.0.1
Adobe ≫ Acrobat Reader Version10.0.2
Adobe ≫ Acrobat Reader Version10.0.3
Adobe ≫ Acrobat Reader Version10.1
Adobe ≫ Acrobat Reader Version10.1.1
Adobe ≫ Acrobat Reader Version10.1.2
Adobe ≫ Acrobat Reader Version10.1.3
Adobe ≫ Acrobat Reader Version10.1.4
Adobe ≫ Acrobat Reader Version10.1.5
Adobe ≫ Acrobat Reader Version10.1.6
Adobe ≫ Acrobat Reader Version10.1.7
Adobe ≫ Acrobat Reader Version10.1.8
Adobe ≫ Acrobat Reader Version10.1.9
Adobe ≫ Acrobat Reader Version10.1.10
Adobe ≫ Acrobat Reader Version10.1.11
Adobe ≫ Acrobat Reader Version10.1.12
Adobe ≫ Acrobat Reader Version11.0.0
Adobe ≫ Acrobat Reader Version11.0.01
Adobe ≫ Acrobat Reader Version11.0.02
Adobe ≫ Acrobat Reader Version11.0.03
Adobe ≫ Acrobat Reader Version11.0.04
Adobe ≫ Acrobat Reader Version11.0.05
Adobe ≫ Acrobat Reader Version11.0.06
Adobe ≫ Acrobat Reader Version11.0.07
Adobe ≫ Acrobat Reader Version11.0.08
Adobe ≫ Acrobat Reader Version11.0.09
Adobe ≫ Acrobat Version10.0
Adobe ≫ Acrobat Version10.0.1
Adobe ≫ Acrobat Version10.0.2
Adobe ≫ Acrobat Version10.0.3
Adobe ≫ Acrobat Version10.1
Adobe ≫ Acrobat Version10.1.1
Adobe ≫ Acrobat Version10.1.2
Adobe ≫ Acrobat Version10.1.3
Adobe ≫ Acrobat Version10.1.4
Adobe ≫ Acrobat Version10.1.5
Adobe ≫ Acrobat Version10.1.6
Adobe ≫ Acrobat Version10.1.7
Adobe ≫ Acrobat Version10.1.8
Adobe ≫ Acrobat Version10.1.9
Adobe ≫ Acrobat Version10.1.10
Adobe ≫ Acrobat Version10.1.11
Adobe ≫ Acrobat Version10.1.12
Adobe ≫ Acrobat Version11.0
Adobe ≫ Acrobat Version11.0.1
Adobe ≫ Acrobat Version11.0.2
Adobe ≫ Acrobat Version11.0.3
Adobe ≫ Acrobat Version11.0.4
Adobe ≫ Acrobat Version11.0.5
Adobe ≫ Acrobat Version11.0.6
Adobe ≫ Acrobat Version11.0.7
Adobe ≫ Acrobat Version11.0.8
Adobe ≫ Acrobat Version11.0.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 12.44% 0.937
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.