CVE-2019-7097 Information disclosure in Adobe Dreamweaver
Attackers can disclose sensitive data via SMB relay attacks due to insecure protocol implementation in Adobe Dreamweaver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-7097?
CVE-2019-7097 is a high-severity vulnerability in Adobe Dreamweaver, published on 23 May 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploitation could lead to sensitive data disclosure if smb request is subject to a relay attack.
Which versions are affected by CVE-2019-7097?
It affects 1 product.
Products include Adobe Dreamweaver.
How do I fix CVE-2019-7097?
No fix has been published for CVE-2019-7097 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-7097 being exploited?
There is no known exploitation of CVE-2019-7097 in the wild and no public exploit code.
Other vulnerabilities in Adobe Dreamweaver
- CVE-2018-4924 Command injection in Adobe Dreamweaver CC 18.0 and earlier versions
- CVE-2010-3132 Path traversal in n/a
- CVE-2026-47906 Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395)
- CVE-2026-47907 Dreamweaver Desktop | Improper Access Control (CWE-284)
- CVE-2026-21267 Command injection in Adobe Dreamweaver Desktop
Sources
Also known as GHSA-pmp3-7925-h764.