CVE-2024-30300

criticalpriority · track · 39EPSS 0.007 · 54 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.73% (54th) EPSS

CVSS 9.8 · critical

Is it mine?

7 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · ncsc_nl

EPSS · scored 2026-10-27

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user privileges. Exploitation of this issue does not require user interaction.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · psirt@adobe.comexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-200USCWE-200US

affected products (7)

Products and version ranges known to be affected.

Adobe Adobe Framemaker Publishing Server≤ 0 ≤2022.2enisa_euvdEU
Adobe Systems Inc. Adobe FrameMaker Publishing Server (FMPS)≤ 2020 Update 3fstec_bduRU
Adobe Systems Inc. Adobe FrameMaker Publishing Server (FMPS)≤ 2022.2fstec_bduRU
adobe_framemaker_publishing_serverall versionsncsc_nlNLcpe:2.3:a:adobe:adobe_framemaker_publishing_server:*:*:*:*:*:*:*:*
adobe framemaker publishing server< 2020nvdUScpe:2.3:a:adobe:framemaker_publishing_server:*:*:*:*:*:*:*:*
adobe framemaker publishing server= 2020nvdUScpe:2.3:a:adobe:framemaker_publishing_server:*:*:*:*:*:*:*:*
adobe framemaker publishing server= 2022nvdUScpe:2.3:a:adobe:framemaker_publishing_server:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2024-0254Kwetsbaarheden verholpen in Adobe FrameMaker Publishing ServerNL2024-06-13csaf · ncsc_nlNL
Adobe heeft kwetsbaarheden verholpen in FrameMaker Publishing Server.
WID-SEC-W-2024-1352Adobe FrameMaker: Mehrere Schwachstellen ermöglichen PrivilegieneskalationDeutsch2024-06-11csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe FrameMaker ausnutzen, um seine Privilegien zu erhöhen.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu ncsc_nl nvd cert_bund NVD CVE.org MITRE

published 2024-06-13modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan