CVE-2020-9743

adobe experience manager

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-9743

Katalog CVE

CVSS 6.1 · Medium EPSS 2,0%

Kerentanan Improper Input Validation pada adobe experience manager. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).

Rincian

Terbit di NVD
10 September 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
2,0% peluang dieksploitasi; lebih tinggi dari 79,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
adobe experience manager Versi 6.3.0.0 hingga 6.3.3.8
adobe experience manager Versi 6.4.0.0 hingga 6.4.8.1
adobe experience manager Versi 6.5.0.0 hingga 6.5.5.0
adobe experience manager Versi 6.2.0.0 sp1
adobe experience manager Versi 6.2.0.0 sp1-cfp1
adobe experience manager Versi 6.2.0.0 sp1-cfp10
adobe experience manager Versi 6.2.0.0 sp1-cfp11
adobe experience manager Versi 6.2.0.0 sp1-cfp12.1
adobe experience manager Versi 6.2.0.0 sp1-cfp13
adobe experience manager Versi 6.2.0.0 sp1-cfp14
adobe experience manager Versi 6.2.0.0 sp1-cfp15
adobe experience manager Versi 6.2.0.0 sp1-cfp16
adobe experience manager Versi 6.2.0.0 sp1-cfp17
adobe experience manager Versi 6.2.0.0 sp1-cfp18
adobe experience manager Versi 6.2.0.0 sp1-cfp19
adobe experience manager Versi 6.2.0.0 sp1-cfp2
adobe experience manager Versi 6.2.0.0 sp1-cfp20
adobe experience manager Versi 6.2.0.0 sp1-cfp3
adobe experience manager Versi 6.2.0.0 sp1-cfp4
adobe experience manager Versi 6.2.0.0 sp1-cfp5
adobe experience manager Versi 6.2.0.0 sp1-cfp6
adobe experience manager Versi 6.2.0.0 sp1-cfp7
adobe experience manager Versi 6.2.0.0 sp1-cfp8
adobe experience manager Versi 6.2.0.0 sp1-cfp9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.