CVE-2018-4924

critical · 9.8

Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

9.8

CVSS

14.3%

EPSS (exploit prob.)

96th

EPSS percentile

2018-05-19

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
adobe	dreamweaver	<= 18.0
microsoft	windows	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/103395
http://www.securitytracker.com/id/1040516
https://helpx.adobe.com/security/products/dreamweaver/apsb18-07.html
http://www.securityfocus.com/bid/103395
http://www.securitytracker.com/id/1040516
https://helpx.adobe.com/security/products/dreamweaver/apsb18-07.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-4924