7.8
CVE-2017-3005
- EPSS 0.39%
- Published 12.04.2017 14:59:01
- Last modified 20.04.2025 01:37:25
- Source psirt@adobe.com
- Teams watchlist Login
- Open Login
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Photoshop Cc Version >= 17.0 <= 17.0.1
Adobe ≫ Photoshop Cc Version >= 18.0 <= 18.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.572 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-428 Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.