Thursday, March 27, 2025
HomeCVE/vulnerabilityCritical Code Execution Flaws With Adobe InDesign, Framemaker, and Experience Manager -...

Critical Code Execution Flaws With Adobe InDesign, Framemaker, and Experience Manager – Update Now!

Published on

SIEM as a Service

Follow Us on Google News

Adobe has released updates that fix critical vulnerabilities in the Adobe InDesign, Framemaker, and Experience Manager. Attackers can exploit the vulnerability to execute code in the context of the current user.

Adobe InDesign | APSB20-52

The update addresses multiple critical security vulnerabilities with Adobe InDesign that allows an attacker to execute arbitrary code in the context of the user.

Adobe InDesign 15.1.1 and below are affected with the vulnerability, users are recommended to update with the 15.1.2 version.

Adobe Experience Manager | APSB20-56

The updates for Adobe Experience Manager (AEM) and the AEM Forms add-on package resolves Critical and Important security vulnerabilities.

Successful exploitation of these vulnerabilities could result in arbitrary JavaScript execution in the browser.

Adobe Experience Manager 6.5.5.0 and earlier versions, 6.4.8.1 and earlier versions, 6.3.3.8 and earlier versions, 6.2 SP1-CFP20, and earlier versions are affected.

Adobe Framemaker | APSB20-54

Security updates for Adobe Framemaker cover multiple critical vulnerabilities, successful exploitation leads to arbitrary code execution in the context of the current user.

Adobe Framemaker 2019.0.6 and below are affected with the vulnerability, users are recommended to update with 2019.0.7.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity, and hacking news updates.

Related Read

Adobe Released Security Updates for 87 Vulnerabilities with Media Encoder, Flash, Adobe Acrobat and Reader

Adobe Released Security Updates & Fixed 43 Vulnerabilities in Acrobat Reader, Adobe Flash & More

Adobe Releases Security Updates that Fixes Critical Vulnerabilities with Photoshop CC and Digital Editions

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Use “Atlantis AIO” Tool to Automate Credential Stuffing Attacks

In a concerning development for cybersecurity professionals, threat actors are increasingly utilizing a powerful...

Hackers Exploit COM Objects for Fileless Malware and Lateral Movement

Security researchers Dylan Tran and Jimmy Bayne have unveiled a new fileless lateral movement...

B1ack’s Stash Marketplace Actors Set to Release 4 Million Stolen Credit Card Records for Free

In a significant escalation of illicit activities, B1ack’s Stash, a notorious dark web carding...

Pakistan APT Hackers Weaponize malicious IndiaPost Site to Target Windows and Android Users

A Pakistan-based Advanced Persistent Threat (APT) group, likely APT36, has launched a multi-platform cyberattack...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Threat Actors Use “Atlantis AIO” Tool to Automate Credential Stuffing Attacks

In a concerning development for cybersecurity professionals, threat actors are increasingly utilizing a powerful...

Hackers Exploit COM Objects for Fileless Malware and Lateral Movement

Security researchers Dylan Tran and Jimmy Bayne have unveiled a new fileless lateral movement...

B1ack’s Stash Marketplace Actors Set to Release 4 Million Stolen Credit Card Records for Free

In a significant escalation of illicit activities, B1ack’s Stash, a notorious dark web carding...