Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2020-9738

AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when visiting the page containing the vulnerable field.

  • Published: Sep 10, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-9738
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.8
  • AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
adobe / experience_manager 6.5.0.0 6.5.5.0.x
adobe / experience_manager 6.4.0.0 6.4.8.1.x
adobe / experience_manager 6.3.0.0 6.3.3.8.x
adobe / experience_manager 6.2.0.0-sp1-cfp20 6.2.0.0-sp1-cfp20.x
adobe / experience_manager 6.2.0.0-sp1 6.2.0.0-sp1.x
adobe / experience_manager 6.2.0.0-sp1-cfp19 6.2.0.0-sp1-cfp19.x
adobe / experience_manager 6.2.0.0-sp1-cfp18 6.2.0.0-sp1-cfp18.x
adobe / experience_manager 6.2.0.0-sp1-cfp17 6.2.0.0-sp1-cfp17.x
adobe / experience_manager 6.2.0.0-sp1-cfp16 6.2.0.0-sp1-cfp16.x
adobe / experience_manager 6.2.0.0-sp1-cfp15 6.2.0.0-sp1-cfp15.x
adobe / experience_manager 6.2.0.0-sp1-cfp14 6.2.0.0-sp1-cfp14.x
adobe / experience_manager 6.2.0.0-sp1-cfp13 6.2.0.0-sp1-cfp13.x
adobe / experience_manager 6.2.0.0-sp1-cfp12.1 6.2.0.0-sp1-cfp12.1.x
adobe / experience_manager 6.2.0.0-sp1-cfp11 6.2.0.0-sp1-cfp11.x
adobe / experience_manager 6.2.0.0-sp1-cfp10 6.2.0.0-sp1-cfp10.x
adobe / experience_manager 6.2.0.0-sp1-cfp9 6.2.0.0-sp1-cfp9.x
adobe / experience_manager 6.2.0.0-sp1-cfp8 6.2.0.0-sp1-cfp8.x
adobe / experience_manager 6.2.0.0-sp1-cfp7 6.2.0.0-sp1-cfp7.x
adobe / experience_manager 6.2.0.0-sp1-cfp6 6.2.0.0-sp1-cfp6.x
adobe / experience_manager 6.2.0.0-sp1-cfp5 6.2.0.0-sp1-cfp5.x
adobe / experience_manager 6.2.0.0-sp1-cfp4 6.2.0.0-sp1-cfp4.x
adobe / experience_manager 6.2.0.0-sp1-cfp3 6.2.0.0-sp1-cfp3.x
adobe / experience_manager 6.2.0.0-sp1-cfp2 6.2.0.0-sp1-cfp2.x
adobe / experience_manager 6.2.0.0-sp1-cfp1 6.2.0.0-sp1-cfp1.x