Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:experience_manager:6.2.0.0:sp1:*:*:*:*:*:*

part: a version: 6.2.0.0 update: sp1

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductExperience Manager (4312bd60-0d9f-5443-9cf9-eaaabd81f028)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9743 vulnerable 2026-06-08 05:28:02.713848 HTML injection in AEM's content editor component
MEDIUM (5.3)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).
Published: 2020-09-10T16:36:06.556Z
Updated: 2024-09-16T18:28:22.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9740 vulnerable 2026-06-08 05:28:02.710932 Stored XSS in AEM Design Importer Component
CRITICAL (9)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Importer. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Published: 2020-09-10T16:34:33.661Z
Updated: 2024-09-16T16:43:36.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9738 vulnerable 2026-06-08 05:28:02.708227 Stored XSS in AEM's Content Repository Development Environment
MEDIUM (6.8)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when visiting the page containing the vulnerable field.
Published: 2020-09-10T16:35:00.677Z
Updated: 2024-09-16T20:11:46.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9737 vulnerable 2026-06-08 05:28:02.706458 Stored XSS in AEM's Content Repository Development Environment
MEDIUM (6.8)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Published: 2020-09-10T16:34:53.445Z
Updated: 2024-09-17T02:32:24.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9736 vulnerable 2026-06-08 05:28:02.704718 Stored XSS in AEM's Content Repository Development Environment
MEDIUM (6.8)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when browsing to the page containing the vulnerable field.
Published: 2020-09-10T16:35:25.086Z
Updated: 2024-09-17T01:51:05.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9735 vulnerable 2026-06-08 05:28:02.690029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.