Adobe » Adobe Content Server : Security Vulnerabilities, CVEs,
The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available.
Max CVSS
5.0
EPSS Score
0.45%
Published
2002-10-04
Updated
2016-10-18
The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp.
Max CVSS
5.0
EPSS Score
0.45%
Published
2002-10-04
Updated
2016-10-18
The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by checking out the same book multiple times.
Max CVSS
5.0
EPSS Score
0.86%
Published
2002-10-04
Updated
2016-10-18
3 vulnerabilities found