CVE-2020-9743

CVE-2020-9743 is an HTML injection vulnerability in Adobe Experience Manager’s content editor. Affected are AEM 6.5.5.0 and earlier, 6.4.8.1 and earlier, 6.3.3.8 and earlier, and 6.2 SP1-CFP20 and earlier. The issue allows unauthenticated users to craft a request that injects arbitrary HTML, enab...

CVE-2020-9734

The CVE-2020-9734 issue affects Adobe Experience Manager (AEM) Forms add-on versions 6.5.5.0 and earlier and 6.4.8.1 and earlier. It is a stored XSS vulnerability that lets users with Author privileges store scripts in Forms fields, which could be executed in a victim’s browser when opening the a...

CVE-2020-9734 Stored XSS in AEM Forms component

The AEM Forms add-on for versions 6.5.5.0 and below and 6.4.8.1 and below is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they op...

CVE-2020-9742 Reflected XSS in AEM Inbox module

AEM versions 6.5.5.0 and below, 6.4.8.1 and below and 6.3.3.8 and below are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Inbox calendar feature. These scripts may be executed in a victim’s browser when...

CVE-2020-9742

CVE-2020-9742 affects Adobe Experience Manager (AEM) versions 6.5.5.0 and below, 6.4.8.1 and below, and 6.3.3.8 and below, via a stored XSS in the Inbox calendar fields that can execute malicious scripts in a victim’s browser when the vulnerable page is opened. The issue is confirmed in multiple ...

CVE-2020-9741 Stored XSS in AEM Forms Components

The AEM forms add-on for versions 6.5.5.0 and below and 6.4.8.2 and below is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they op...

CVE-2020-9741

The CVE-2020-9741 entry concerns Adobe Experience Manager (AEM) Forms add-on vulnerabilities. Affected versions: AEM Forms add-on 6.5.5.0 (and below) and 6.4.8.2 (and below). The issue is a stored XSS in fields associated with the Forms component, exploitable by users with Author privileges. When...

CVE-2020-9736

CVE-2020-9736 affects Adobe Experience Manager: stored XSS in the Content Repository Development Environment allowing malicious scripts to be stored in certain node fields and potentially execute in a victim’s browser. Affected versions include AEM 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 an...

CVE-2020-9736 Stored XSS in AEM's Content Repository Development Environment

AEM versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below and 6.2 SP1-CFP20 and below are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be...

CVE-2020-9735 Stored XSS in AEM's Content Repository Development Environment

AEM versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below and 6.2 SP1-CFP20 and below are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be...

CVE-2020-9735

CVE-2020-9735 is a stored XSS in Adobe Experience Manager (AEM) affecting multiple supported lines: AEM 6.2.x up to 6.2 SP1-CFP20, 6.3.x up to 6.3.3.8, 6.4.x prior to 6.4.8.2, and 6.5.x prior to 6.5.6.0. The vulnerability originates in the Content Repository Development Environment and allows an ...

CVE-2020-9732

CVE-2020-9732 affects Adobe Experience Manager (AEM) Forms add-on for versions 6.5.5.0 and earlier and 6.4.8.2 and earlier. Root cause is a stored XSS in fields for the Sites component, allowing an author to store malicious scripts that execute in a viewer’s browser when the vulnerable page is op...

CVE-2020-9732 Stored XSS in AEM Sites Components

The AEM Forms add-on for versions 6.5.5.0 and below and 6.4.8.2 and below are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be executed in a victim’s browser when they...

CVE-2020-9738

CVE-2020-9738 is a stored XSS in Adobe Experience Manager (AEM). Affected versions: AEM 6.5.5.0 and earlier, 6.4.8.1 and earlier, 6.3.3.8 and earlier, and 6.2 SP1-CFP20 and earlier. The vulnerability affects the Content Repository Development Environment and allows storing malicious scripts in ce...

CVE-2020-9738 Stored XSS in AEM's Content Repository Development Environment

AEM versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below and 6.2 SP1-CFP20 and below are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be...

CVE-2020-9737

CVE-2020-9737 is a stored XSS vulnerability in Adobe Experience Manager (AEM) affecting versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below, and 6.2 SP1-CFP20 and below. The issue arises in the Content Repository Development Environment where an attacker with access to certain node f...

CVE-2020-9737 Stored XSS in AEM's Content Repository Development Environment

AEM versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below and 6.2 SP1-CFP20 and below are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be...

CVE-2020-9733

CVE-2020-9733 affects Adobe Experience Manager (AEM) Java servlet on AEM 6.5.5.0 and earlier and 6.4.8.1 and earlier, which can run with the permissions of a high-privileged service user and may lead to read-only access to sensitive data in the AEM repository. The issue is mitigated by applying p...

CVE-2020-9733 Sensitive information disclosure possible in AEM

An AEM java servlet in AEM versions 6.5.5.0 and below and 6.4.8.1 and below executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository...

CVE-2020-9740 Stored XSS in AEM Design Importer Component

AEM versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below and 6.2 SP1-CFP20 and below are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Importer. These scripts may be executed in a...