CVE-2024-26063Sensitive Information Exposure in Adobe Experience Manager

Severity
5.3MEDIUMNVD
EPSS
0.3%
top 50.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 18

Description

Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information, potentially bypassing security measures. Exploitation of this issue does not require user interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

NVDadobe/experience_manager< 6.5.20.0+1

🔴Vulnerability Details

1
GHSA
GHSA-xxjh-5gpj-36xr: Adobe Experience Manager versions 62024-03-18
CVE-2024-26063 — Sensitive Information Exposure | cvebase