305 matches found
biz.netcentric.aem.sysenvtools:apply-system-env-install-hook (>=1.2.0 <=1.2.3), biz.netcentric.aem.sysenvtools:system-env-change-listener (>=1.2.0 <=1.2.3) +410 more potentially affected by CVE-2025-58782 via org.apache.jackrabbit:jackrabbit-jcr-commons (>=2.0-beta1 <=2.22.1)
org.apache.jackrabbit:jackrabbit-jcr-commons MAVEN version =2.0-beta1, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0, =2.0.0, =2.5.0, =2.5.4, =2.5.4, =4.2.0, =1.0.0, =1.0.0, =1.0.0, =1.4.0 - biz.ne...
Exploit for CVE-2025-54253
!Explo...
APSB25-82 : Security update available for Adobe Experience Manager Forms
Adobe has released a security update for Adobe Experience Manager Forms on Java Enterprise Edition JEE. This update addresses critical vulnerabilities that could lead to arbitrary code execution and arbitrary file system read...
APSB25-68 : Security update available for Adobe Experience Manager Screens
Adobe has released security updates for AEM Screens. This vulnerability resolves important vulnerabilities that could lead to arbitrary code execution...
APSB25-67 : Security update available for Adobe Experience Manager Forms
Adobe has released a security update for Adobe Experience Manager Forms on JEE. This update addresses a critical vulnerability that could lead to arbitrary code execution...
CVE-2025-46974
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
CVE-2025-46840
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager(AEM) 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2025-5434
A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-5434
A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-5434 Aem Solutions CMS page.php sql injection
A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-5434 Aem Solutions CMS page.php sql injection
A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-5434
CVE-2025-5434 refers to a SQL injection in Aem Solutions CMS (versions up to 1.0) arising from unsafely handling the ID parameter in /page.php. Multiple sources (NVD, Red Hat, CVE/CVEList, PT-Security, CNNVD) describe remote exploitation and disclosure of the exploit; affected component is the /p...
PT-2025-23475 · Unknown · Aem Solutions Cms
Name of the Vulnerable Software and Affected Versions: Aem Solutions CMS versions up to 1.0 Description: A critical issue affects an unknown part of the file /page.php. The manipulation of the ID argument leads to sql injection. It is possible to initiate the attack remotely. The vendor was...
Aem Solutions CMS 注入漏洞
Aem Solutions CMS is a software for content management from Aem Solutions, USA. An injection vulnerability exists in Aem Solutions CMS version 1.0 and prior versions, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /page.php...
CVE-2021-21084
AEM's Cloud Service offering, as well as versions 6.5.7.0 and below, 6.4.8.3 and below and 6.3.3.8 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be...
Malicious code in client-aem-content-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 779c71c2fb1a6dd0a5ca58ddaa83c69bb166c94bb2d859ec8255efe06565c4a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3724 Malicious code in client-aem-content-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 779c71c2fb1a6dd0a5ca58ddaa83c69bb166c94bb2d859ec8255efe06565c4a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
APSB25-27 : Security update available for Adobe Experience Manager Forms
Adobe has released security updates for AEM Forms on JEE versions for a dependency on vulnerable Third-Party Component . This dependency update resolves an important vulnerability that could lead to path traversal and case sensitive match exception...