Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-9733

Sensitive information disclosure possible in AEM

Description

An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Experience Manager

  • unspecified to ≤ 6.5.5.0affected
  • unspecified to ≤ 6.4.8.1affected
  • unspecified to ≤ Noneaffected

References