URL Redirection to Untrusted Site ('Open Redirect') which could result in Security feature bypass.

Cross-site Scripting (Reflected XSS) which could result in Arbitrary code execution.

Improper Authorization which could result in Security feature bypass.

Improper Access Control which could result in Security feature bypass.

Cross-site Scripting (Stored XSS) which could result in Arbitrary code execution.

XML Injection (aka Blind XPath Injection) which could result in Arbitrary file system read.

Technique: Exploitation for Client Execution (T1203): Details of these vulnerabilities are as follows Multiple vulnerabilities have been discovered in Adobe Products, the most severe of which could allow for arbitrary code execution. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. Depending on the privileges associated with the user, an attacker could then install programs view, change, or delete data or create new accounts with full user rights. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user.

Adobe ColdFusion is a commercial rapid web-application development computing platform.

Adobe Photoshop is a raster graphics editor.

Adobe Substance 3D Stager is a state-of-the-art staging tool to create 3D scenes with real-time 3D visualization and high-quality renders.

Adobe Creative Cloud is a collection of software for graphic design, video editing, web development, and photography.Adobe Dimension is a 3D rendering and design software.Adobe Illustrator is a vector graphics editor and design program.Adobe Experience Manager Forms is an end-to-end digital document solution that makes it easy to create responsive forms that customers can easily complete and securely e-sign.Adobe Commerce is a platform for delivering eCommerce capabilities, including out-of-the-box features, an ability to customize, and third-party integrations.Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.

Adobe substance 3d