An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
adobe experience manager |
||
adobe experience manager forms 6.4.8.1 |
||
adobe experience manager forms 6.5.5.0 |