VULNERABILITY INTELLIGENCE
CVE-2017-11273
CVSS score5.5 MEDIUM
EPSS probability4.38%
CISA KEVNot currently listed
Published2017-12-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could lead to sensitive information disclosure.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory