CVE-2023-44324

9.8 criticalEPSS 1.4%

Critical (9.8) in adobe framemaker publishing server. EPSS 1.4% chance of exploitation in the next 30 days.

Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthenticated attacker can abuse this vulnerability to access the API and leak default admin's password. Exploitation of this issue does not require user interaction.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2023-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:framemaker_publishing_server

References

https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb23-58.html
https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb23-58.html

Check your stack JSON