@adobe/aem-site-template-builder (>=0.1.7 <=0.1.8), alexa-scripts (>=0.2.0 <=0.3.4) +4 more potentially affected by unknown CVE via bestzip (>=1.1.3 <=2.1.6)

bestzip NPM version =1.1.3, =0.1.7, =0.2.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-4QQC-MP5F-CCV4...

@adobe/aem-site-template-builder (>=0.1.7 <=0.1.8), vulnerable-js (>=1.0.0 <=1.0.2) potentially affected by CVE-2020-7730 via bestzip (=2.1.6)

bestzip NPM version =2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on bestzip and may be impacted: - @adobe/aem-site-template-builder =0.1.7, =1.0.0, =1.0.2 Source cves: CVE-2020-7730 Source advisory: SNYK:JS-BESTZIP-609371...

APSB20-08 Security update available for Adobe Experience Manager

Adobe has released security hotfixes for Adobe Experience Manager AEM. These hotfixes resolve a vulnerability in AEM versions 6.5 and 6.4 rated Important. Successful exploitation could result in a denial-of-service condition...

Adobe Patches Five Critical Illustrator CC Flaws

Adobe has released patches for five critical vulnerabilities in Adobe Illustrator CC, its popular vector graphics editor tool, which if exploited could enable arbitrary code execution. Overall Adobe patched nine vulnerabilities as part of its regularly-scheduled updates on Tuesday, including five...

Informatica: accounts.informatica.com - RCE due to exposed Groovy console

Researcher identified a misconfigured "Groovy" panel on an AEM web application that was vulnerable to RCE. The panel was subsequently disabled...

Cross site scripting

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

Adobe Experience Manager server-side request forgery vulnerability (CNVD-2018-14949)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager Information Disclosure Vulnerability (CNVD-2017-34865)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. An information disclosure vulnerability exists in AEM versions 6.1 and 6.2. A remote attacker could exploit this...

CVE-2017-3108

CVE-2017-3108 affects Adobe Experience Manager 6.2 and earlier, described as a malicious file execution vulnerability. The initial entry notes high risk (CVSSv2 base 7.5, PARTIAL impact; CVSSv3 base 9.8, CRITICAL) with network-based, unauthenticated access and broad impacts to confidentiality, in...

CVE-2017-3067

CVE-2017-3067 affects Adobe Experience Manager Forms (AEM Forms) versions 6.0–6.2, with an information disclosure vulnerability caused by abuse of the pre-population service. Exploitation could disclose sensitive information via the pre-population mechanism. Adobe released APSB17-16 security upda...

Adobe Patches Seven Critical Vulnerabilities in Flash, AEM

Adobe fixed eight vulnerabilities, seven critical, in Flash Player and its Adobe Experience Manager AEM Forms product as part of a regularly scheduled update Tuesday morning. All seven of the Flash Player bugs can lead to code execution and should be considered critical, according to a security...

APSB17-16 Security updates available for Adobe Experience Manager Forms

Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve an important information disclosure vulnerability CVE-2017-3067 resulting from abuse of the pre-population service in AEM Forms. This issue was resolved by providin...

CVE-2016-6934

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be used in cross-site scripting attacks...

CVE-2016-7885

CVE-2016-7885 affects Adobe Experience Manager (AEM) versions 6.2 and earlier. The issue is a Cross-Site Request Forgery (CSRF) vulnerability, enabling an attacker to potentially perform actions on behalf of an authenticated user. The public description confirms the vulnerability type and impacte...

Microsoft's signout. live. com site there is a remote code execution vulnerability(RCE)-vulnerability warning-the black bar safety net

! Long story short: due to the Adobe product of the vulnerability and Microsoft login credentials incorrect use, leading to a malicious attacker may be in Microsoft's signout. live. com domain name for remote code execution. The so-called remote code execution vulnerability refers to the user can...

Apache Sling Framework 2.3.6 Information Disclosure

Document Title: =============== Apache Sling Framework v2.3.6 Adobe AEM CVE-2016-0956 - Information Disclosure Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1536 Adobe Bulletin:...

Adobe Experience Manager (AEM) Detection (HTTP)

HTTP based detection of Adobe Experience Manager AEM. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Experience Manager (AEM) Multiple Vulnerabilities (APSB16-05) - Active Check

Adobe Experience Manager AEM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-0955

CVE-2016-0955 affects Adobe Experience Manager (AEM) 6.1.0. It is a cross-site scripting (XSS) vulnerability in the Deletion popup dialog where a folder title field is mishandled, allowing a remote authenticated user to inject arbitrary web script or HTML. The issue is confirmed in multiple feeds...

CVE-2016-0955

Cross-site scripting XSS vulnerability in Adobe Experience Manager AEM 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog...