CVE-2019-16468 — Injection in Adobe Experience Manager

CWE-74 — InjectionCWE-200 — Sensitive Information Exposure2 documents2 sources
Severity
7.5HIGHNVD
EPSS
4.2%
top 11.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Experience ManagerAdobe Experience Manager
Timeline
PublishedJan 15
Latest updateMay 24

Description

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDadobe/experience_manager6.3 — 6.3.3.7+2
▶CVEListV5adobe/adobe_experience_manager6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 versions

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-j26m-mhw3-8vc7: Adobe Experience Manager versions 6↗2022-05-24
▶
CVE-2019-16468 — Injection in Adobe Experience Manager | cvebase