Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-91418
HistoryNov 21, 2021 - 12:00 a.m.

Adobe Experience Manager Access Control Error Vulnerability

2021-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

36.8%

Adobe Experience Manager (AEM) is a content management solution from Adobe that can be used to build websites, mobile applications, and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. Adobe Experience Manager in version 6.5.9.0 and earlier is vulnerable to an access control error that stems from a network system or product that does not properly validate incoming data. An attacker could exploit this vulnerability by manipulating the referer header to access arbitrary pages that they are not authorized to access.

CPENameOperatorVersion
Adobe Experience Manager <=6.eq5.9.0

0.001 Low

EPSS

Percentile

36.8%