Threat Intelligence Database

Adobe Experience Manager (AEM) 6.5 Forms JEE contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to bypass security features and gain unauthorized write access. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised webpage. This vulnerability can cause limited disruption to availability but does not impact confidentiality.

Adobe Experience Manager (AEM) 6.5 Forms JEE contains an Incorrect Authorization vulnerability (CWE-863) that allows an attacker to execute arbitrary code with the privileges of the current user. This vulnerability does not require any user interaction to be exploited and affects versions up to and including 6.5.25. The vulnerability has a critical severity rating with a CVSS score of 10.0, indicating a high impact on confidentiality, integrity, and availability.

Adobe Experience Manager (AEM) 6.5 Forms JEE contains an improper input validation vulnerability that allows an attacker with high privileges to execute arbitrary code without user interaction. This vulnerability affects versions up to and including 6.5.25 and changes the security scope. It has a critical severity with a CVSS score of 9.1.

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.