CVE-2014-8068

CVE Database · CVE-2014-8068

CVE-2014-8068

· N/AModified

CVSS v3.1

N/A

EPSS

1.79%

Published

Oct 9, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Adobe Digital Editions (DE) 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information.

Weaknesses (CWE)

CWE-200

Affected Products (1)

adobe · digital_editionsvulnerable

References (10)

http://arstechnica.com/security/2014/10/adobes-e-book-reader-sends-your-reading-logs-back-to-adobe-in-plain-text/

http://secunia.com/advisories/61551

http://the-digital-reader.com/2014/10/06/adobe-spying-users-collecting-data-ebook-libraries/

Vendor Advisory

http://twitter.com/AdobeSecurity/statuses/519826275008282624

https://exchange.xforce.ibmcloud.com/vulnerabilities/97696

http://arstechnica.com/security/2014/10/adobes-e-book-reader-sends-your-reading-logs-back-to-adobe-in-plain-text/

http://secunia.com/advisories/61551

http://the-digital-reader.com/2014/10/06/adobe-spying-users-collecting-data-ebook-libraries/

Vendor Advisory

http://twitter.com/AdobeSecurity/statuses/519826275008282624

KEV Catalog EPSS Scores Vendors All CVEs