Adobe Experience Manager 6.2.0.0 SP1-CFP11
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:experience_manager:6.2.0.0:sp1-cfp11:*:*:*:*:*:*
part: a version: 6.2.0.0 update: sp1-cfp11
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Experience Manager (4312bd60-0d9f-5443-9cf9-eaaabd81f028) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9743 |
vulnerable | 2026-06-08 05:28:02.714175 |
HTML injection in AEM's content editor component
MEDIUM (5.3)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).
Published: 2020-09-10T16:36:06.556Z
Updated: 2024-09-16T18:28:22.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9740 |
vulnerable | 2026-06-08 05:28:02.711270 |
Stored XSS in AEM Design Importer Component
CRITICAL (9)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Importer. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Published: 2020-09-10T16:34:33.661Z
Updated: 2024-09-16T16:43:36.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9738 |
vulnerable | 2026-06-08 05:28:02.708364 |
Stored XSS in AEM's Content Repository Development Environment
MEDIUM (6.8)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when visiting the page containing the vulnerable field.
Published: 2020-09-10T16:35:00.677Z
Updated: 2024-09-16T20:11:46.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9737 |
vulnerable | 2026-06-08 05:28:02.706515 |
Stored XSS in AEM's Content Repository Development Environment
MEDIUM (6.8)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Published: 2020-09-10T16:34:53.445Z
Updated: 2024-09-17T02:32:24.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9736 |
vulnerable | 2026-06-08 05:28:02.704895 |
Stored XSS in AEM's Content Repository Development Environment
MEDIUM (6.8)
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when browsing to the page containing the vulnerable field.
Published: 2020-09-10T16:35:25.086Z
Updated: 2024-09-17T01:51:05.384Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9735 |
vulnerable | 2026-06-08 05:28:02.692490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.