{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-23T04:28:35.005","vulnerabilities":[{"cve":{"id":"CVE-2024-47422","sourceIdentifier":"psirt@adobe.com","published":"2024-10-09T15:15:14.190","lastModified":"2026-06-17T07:57:04.460","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious path into the search directories, which the application could unknowingly execute. This could allow the attacker to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction."},{"lang":"es","value":"Las versiones 2020.6, 2022.4 y anteriores de Adobe Framemaker se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría provocar la ejecución de código arbitrario. Un atacante podría aprovechar esta vulnerabilidad insertando una ruta maliciosa en los directorios de búsqueda, que la aplicación podría ejecutar sin saberlo. Esto podría permitir al atacante ejecutar código arbitrario en el contexto del usuario actual. Para aprovechar este problema se requiere la interacción del usuario."}],"affected":[{"source":"psirt@adobe.com","affectedData":[{"vendor":"Adobe","product":"Adobe Framemaker","defaultStatus":"affected","versions":[{"version":"0","lessThanOrEqual":"2022.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"adobe","product":"framemaker","defaultStatus":"unknown","cpes":["cpe:2.3:a:adobe:framemaker:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"2022.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@adobe.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-09T16:00:21.539270Z","id":"CVE-2024-47422","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@adobe.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*","versionEndExcluding":"2020.7","matchCriteriaId":"F5A639A9-A9B0-43D2-9EB6-774072B29BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*","versionStartIncluding":"2022","versionEndExcluding":"2022.5","matchCriteriaId":"10A66E49-5FA2-4F23-AA9D-21AE055CA140"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://helpx.adobe.com/security/products/framemaker/apsb24-82.html","source":"psirt@adobe.com","tags":["Vendor Advisory"]}]}}]}