Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2020-9732

The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.

  • Published: Sep 10, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-9732
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9
  • AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
adobe / experience_manager 6.5.0.0 6.5.5.0.x
adobe / experience_manager 6.4.0.0 6.4.8.1.x
adobe / experience_manager 6.3.0.0 6.3.3.8.x
adobe / experience_manager - 6.2.1.20.x
adobe / experience_manager_forms 6.5.5.0 6.5.5.0.x
adobe / experience_manager_forms 6.4.8.1 6.4.8.1.x