Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2020-24444

Blind SSRF in Forms add-on for AEM

Description

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability could be exploited by an unauthenticated attacker to gather information about internal systems that reside on the same network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Experience Manager

  • <= Forms SP6 add-on for AEM 6.5.6.0affected
  • <= Forms SP8 add-on for AEM 6.4.8.2affected
  • <= Noneaffected

References