CVE-2023-48441mediumCWE-284

CVE-2023-48441: falha de média gravidade em Adobe Experience Manager

Adobe Experience Manager | Improper Access Control (CWE-284)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Adobe Experience Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.8%
Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does not require user interaction.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Adobe · Adobe Experience Manager
CVEs relacionadas — Adobe Experience Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2025-54253CRITICALAdobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 80.8%KEVCVE-2025-54254HIGHAdobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)EPSS 53.9%CVE-2019-8086—CVE-2019-8086EPSS 22.5%CVE-2019-16469—CVE-2019-16469EPSS 17.2%CVE-2019-7964—CVE-2019-7964EPSS 10.2%CVE-2025-54248HIGHAdobe Experience Manager | Improper Input Validation (CWE-20)EPSS 7.0%