CVE-2024-20738

9.8 criticalEPSS 1.1%

Critical (9.8) in adobe framemaker publishing server. EPSS 1.1% chance of exploitation in the next 30 days.

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of this issue does not require user interaction.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2024-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:framemaker_publishing_server

References

https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-10.html
https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-10.html

Check your stack JSON