CVE-2021-21011CWE-427

Uncontrolled Search Path Element in Adobe Captivate 2019

High · published January 13, 2021

CVSS v3.1
7.0
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02054 · 81.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-01-13T22:40Z
EPSS history
Timeline
  • 13 JAN 22:40Z
    Uncontrolled Search Path Element in Adobe Captivate 2019
    cvelistv5