VulnerabilityModified
CVE-2021-21055
Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure.
MEDIUM 6.2EPSS 0.78%
Does this matter?
Lower severity and a low EPSS score (0.78%). Track it; it rarely justifies an emergency change on its own.
Description
Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure.
- CVSS 3.1
- 6.2 MEDIUMCVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.78% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-426
- Affected
- adobe/dreamweaver
- Source
- psirt@adobe.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.