Lucene search
AdobeAPSB23-18HistoryMar 14, 2023 - 12:00 a.m.
APSB23-18 : Security update available for Adobe Experience Manager
2023-03-1400:00:00
helpx.adobe.com
18
adobe
experience manager
security
update
vulnerabilities
code execution
privilege escalation
security feature bypass
software
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
80.9%
Adobe has released updates for Adobe Experience Manager (AEM). These updates resolve vulnerabilities rated important and moderate. Successful exploitation of these vulnerabilities could result in arbitrary code execution, privilege escalation and security feature bypass.
Affected configurations
Node
adobeexperience_managerRange≤6.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| adobe experience manager (aem) | le | 6.5 |
Related
nessus
nessus
RHEL 9 : httpd and mod_http2 (RHSA-2023:1670)
2023-04-08 00:00:00
Rocky Linux 8 : httpd:2.4 (RLSA-2023:1673)
2023-04-12 00:00:00
cvelist
cvelist
CVE-2023-22266 AEM URL Redirection to Untrusted Site Security feature bypass
2023-03-22 00:00:00
CVE-2023-22260 AEM URL Redirection to Untrusted Site Security feature bypass
2023-03-22 00:00:00
CVE-2023-22261 AEM URL Redirection to Untrusted Site Security feature bypass
2023-03-22 00:00:00
prion
prion
Security feature bypass
2023-03-22 17:15:00
Open redirect
2023-03-22 17:15:00
Cross site scripting
2023-03-22 17:15:00
nvd
nvd
cnvd
cnvd
Adobe Experience Manager URL Redirection Vulnerability (CNVD-2023-45901)
2023-03-17 00:00:00
Adobe Experience Manager Encryption Issue Vulnerability
2023-03-17 00:00:00
Adobe Experience Manager URL Redirection Vulnerability (CNVD-2023-45911)
2023-03-17 00:00:00
cve
cve
ibm
ibm
Security Bulletin: IBM HTTP Server is vulnerable to HTTP request splitting due to the included Apache HTTP Server (CVE-2023-25690)
2023-04-04 16:02:31
redhat
redhat
(RHSA-2023:1670) Important: httpd and mod_http2 security update
2023-04-06 14:39:22
(RHSA-2023:1916) Important: httpd and mod_http2 security update
2023-04-20 13:36:11
(RHSA-2023:1596) Important: httpd:2.4 security update
2023-04-04 09:16:45
osv
osv
Important: httpd:2.4 security update
2023-04-12 01:40:50
Important: httpd and mod_http2 security update
2023-04-12 01:41:37
CVE-2023-25690
2023-03-07 16:15:09
openvas
openvas
Ubuntu: Security Advisory (USN-5942-2)
2023-03-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0803-1)
2023-03-28 00:00:00
oraclelinux
oraclelinux
httpd:2.4 security update
2023-04-07 00:00:00
httpd security update
2023-04-05 00:00:00
httpd and mod_http2 security update
2023-04-06 00:00:00
rocky
rocky
httpd bug fix update
2023-05-25 19:53:09
2.4 bug fix update
2023-05-18 19:17:56
httpd and mod_http2 security update
2023-04-12 01:41:37
alpinelinux
alpinelinux
CVE-2023-25690
2023-03-07 16:15:09
zdt
zdt
Apache 2.4.55 mod_proxy HTTP Request Smuggling Exploit
2024-01-02 00:00:00
almalinux
almalinux
Important: httpd and mod_http2 security update
2023-04-06 00:00:00
Important: httpd:2.4 security update
2023-04-06 00:00:00
veracode
veracode
HTTP Request Smuggling
2023-03-11 00:19:43
debiancve
debiancve
CVE-2023-25690
2023-03-07 16:15:09
packetstorm
packetstorm
Apache 2.4.55 mod_proxy HTTP Request Smuggling
2024-01-02 00:00:00
githubexploit
githubexploit
Exploit for HTTP Request Smuggling in Apache Http Server
2023-12-04 16:58:53
Exploit for HTTP Request Smuggling in Apache Http Server
2023-05-22 03:06:31
ubuntu
ubuntu
Apache HTTP Server vulnerability
2023-03-22 00:00:00
Apache HTTP Server vulnerabilities
2023-03-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-25690 affecting package httpd for versions less than 2.4.56-1
2023-03-24 23:56:03
CVE-2023-25690 affecting package httpd 2.4.55-1
2023-04-07 04:59:28
redhatcve
redhatcve
CVE-2023-25690
2023-03-07 16:30:07
f5
f5
K000133098 : Apache vulnerability CVE-2023-25690
2023-03-22 00:00:00
ubuntucve
ubuntucve
CVE-2023-25690
2023-03-07 00:00:00
kaspersky
kaspersky
KLA48513 Multiple vulnerabilities in Apache HTTP Server
2023-03-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: httpd-2.4.56-1.fc37
2023-03-11 04:29:50
[SECURITY] Fedora 38 Update: httpd-2.4.56-1.fc38
2023-03-18 00:24:30
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.56-alt1
2023-03-17 00:00:00
redos
redos
ROS-20230420-01
2023-04-20 00:00:00
debian
debian
[SECURITY] [DLA 3401-1] apache2 security update
2023-04-24 21:25:54
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
80.9%
Related for APSB23-18