CVE-2020-9733

An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@adobe.com

Published

2020-09-10

Last modified

2024-09-16

Weaknesses

CWE-200, CWE-269

Affected products

• Experience Manager (Adobe)
• Experience Manager Forms (Adobe)

References

• https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html