Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:experience_manager_forms:6.4.8.1:*:*:*:*:*:*:*

part: a version: 6.4.8.1 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductExperience Manager Forms (580d6ef1-daa2-5b09-8ecb-8144304fcc30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9733 vulnerable 2026-06-08 05:28:02.686915 Sensitive information disclosure possible in AEM
HIGH (7.5)
An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.
Published: 2020-09-10T16:34:41.953Z
Updated: 2024-09-16T17:33:37.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9732 vulnerable 2026-06-08 05:28:02.685480 Stored XSS in AEM Sites Components
CRITICAL (9)
The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Published: 2020-09-10T16:35:09.157Z
Updated: 2024-09-17T01:05:42.141Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.