Total vulnerabilities in the database
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing).
| Software | From | Fixed in |
|---|---|---|
| adobe / experience_manager | 6.5.0.0 | 6.5.5.0.x |
| adobe / experience_manager | 6.4.0.0 | 6.4.8.1.x |
| adobe / experience_manager | 6.3.0.0 | 6.3.3.8.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp20 | 6.2.0.0-sp1-cfp20.x |
| adobe / experience_manager | 6.2.0.0-sp1 | 6.2.0.0-sp1.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp19 | 6.2.0.0-sp1-cfp19.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp18 | 6.2.0.0-sp1-cfp18.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp17 | 6.2.0.0-sp1-cfp17.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp16 | 6.2.0.0-sp1-cfp16.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp15 | 6.2.0.0-sp1-cfp15.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp14 | 6.2.0.0-sp1-cfp14.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp13 | 6.2.0.0-sp1-cfp13.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp12.1 | 6.2.0.0-sp1-cfp12.1.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp11 | 6.2.0.0-sp1-cfp11.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp10 | 6.2.0.0-sp1-cfp10.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp9 | 6.2.0.0-sp1-cfp9.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp8 | 6.2.0.0-sp1-cfp8.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp7 | 6.2.0.0-sp1-cfp7.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp6 | 6.2.0.0-sp1-cfp6.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp5 | 6.2.0.0-sp1-cfp5.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp4 | 6.2.0.0-sp1-cfp4.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp3 | 6.2.0.0-sp1-cfp3.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp2 | 6.2.0.0-sp1-cfp2.x |
| adobe / experience_manager | 6.2.0.0-sp1-cfp1 | 6.2.0.0-sp1-cfp1.x |