CVE-2020-9733highCWE-200

CVE-2020-9733: fallo de gravedad alta en Adobe Experience Manager

Sensitive information disclosure possible in AEM

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Adobe Experience Manager

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 3.8%
An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Adobe · Experience Manager
CVEs relacionadas — Adobe Experience Manager

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-28851MEDIUMAEM Reflected XSS Arbitrary code executionEPSS 36.8%CVE-2021-21043MEDIUMReflected Cross-site Scripting (XSS) on version-compare and page-compare toolsEPSS 3.4%CVE-2021-40722CRITICALAEM Forms Improper Restriction of XML External Entity ReferenceEPSS 3.3%CVE-2020-9732CRITICALStored XSS in AEM Sites ComponentsEPSS 2.8%CVE-2020-24444MEDIUMBlind SSRF in Forms add-on for AEMEPSS 2.1%CVE-2021-21083HIGHAdobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-serviceEPSS 2.0%