Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-9733

No fix known EPSS 4%CVSS 7.5

An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.

Published 2020-09-10 · CVE record · OSV

Products: adobe experience_manager