CVE-2020-9688

—

CVSS 3.1

7.8 high

EPSS

5%p91

Published

Jul 17, 2020 (Jul 17, 2020)

Modified

Jun 17, 2026

Description

Adobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: download manager
Weakness: CWE-77
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news2 stories

Adobe Issues July 2020 Critical Security Patches for Multiple Software

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2020Vulnerability in the wildCVE-2020-9682 CVE-2020-9650 CVE-2020-9646+1 CVEs

60

Adobe fixes over a dozen flaws in Media Encoder, Download Manager

Security AffairsJul 14, 17:59 UTC · Jul 14, 2020Vulnerability CVE-2020-9688 CVE-2020-9669 CVE-2020-9671+3 CVEs

60