CVE-2020-9738

adobe experience manager

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-9738

Katalog CVE

CVSS 4.8 · Medium EPSS 1,7%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada adobe experience manager. Skor CVSS 3.1 4.8 (Medium) menurut NVD.

Deskripsi (NVD)

AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when visiting the page containing the vulnerable field.

Rincian

Terbit di NVD
10 September 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
1,7% peluang dieksploitasi; lebih tinggi dari 76,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
adobe experience manager Versi 6.3.0.0 hingga 6.3.3.8
adobe experience manager Versi 6.4.0.0 hingga 6.4.8.1
adobe experience manager Versi 6.5.0.0 hingga 6.5.5.0
adobe experience manager Versi 6.2.0.0 sp1
adobe experience manager Versi 6.2.0.0 sp1-cfp1
adobe experience manager Versi 6.2.0.0 sp1-cfp10
adobe experience manager Versi 6.2.0.0 sp1-cfp11
adobe experience manager Versi 6.2.0.0 sp1-cfp12.1
adobe experience manager Versi 6.2.0.0 sp1-cfp13
adobe experience manager Versi 6.2.0.0 sp1-cfp14
adobe experience manager Versi 6.2.0.0 sp1-cfp15
adobe experience manager Versi 6.2.0.0 sp1-cfp16
adobe experience manager Versi 6.2.0.0 sp1-cfp17
adobe experience manager Versi 6.2.0.0 sp1-cfp18
adobe experience manager Versi 6.2.0.0 sp1-cfp19
adobe experience manager Versi 6.2.0.0 sp1-cfp2
adobe experience manager Versi 6.2.0.0 sp1-cfp20
adobe experience manager Versi 6.2.0.0 sp1-cfp3
adobe experience manager Versi 6.2.0.0 sp1-cfp4
adobe experience manager Versi 6.2.0.0 sp1-cfp5
adobe experience manager Versi 6.2.0.0 sp1-cfp6
adobe experience manager Versi 6.2.0.0 sp1-cfp7
adobe experience manager Versi 6.2.0.0 sp1-cfp8
adobe experience manager Versi 6.2.0.0 sp1-cfp9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.