Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9698 State: PUBLISHED Published: 2020-08-19T12:46:49 Last Updated: 2024-08-04T10:34:39.928Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Buffer error Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9699 State: PUBLISHED Published: 2020-08-19T12:48:44 Last Updated: 2024-08-04T10:34:39.927Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Buffer error Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9700 State: PUBLISHED Published: 2020-08-19T12:51:06 Last Updated: 2024-08-04T10:34:39.953Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Buffer error Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9701 State: PUBLISHED Published: 2020-08-19T12:53:42 Last Updated: 2024-08-04T10:34:39.911Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Buffer error Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9702 State: PUBLISHED Published: 2020-08-19T13:15:01 Last Updated: 2024-08-04T10:34:39.915Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Stack exhaustion Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to application denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9703 State: PUBLISHED Published: 2020-08-19T13:16:50 Last Updated: 2024-08-04T10:34:39.937Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Stack exhaustion Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to application denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9704 State: PUBLISHED Published: 2020-08-19T13:19:23 Last Updated: 2024-08-04T10:34:40.042Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Buffer error Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9705 State: PUBLISHED Published: 2020-08-19T13:20:35 Last Updated: 2024-08-04T10:34:39.946Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9706 State: PUBLISHED Published: 2020-08-19T13:24:16 Last Updated: 2024-08-04T10:34:39.926Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-988/ - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9707 State: PUBLISHED Published: 2020-08-19T13:30:39 Last Updated: 2024-08-04T10:34:39.944Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-987/ - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9708 State: PUBLISHED Published: 2020-08-14T16:48:30.769927Z Last Updated: 2024-09-16T16:43:25.441Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Helix Problem Types: CWE-24 Description: The resolveRepositoryPath function doesn't properly validate user input and a malicious user may traverse to any valid Git repository outside the repoRoot. This issue may lead to unauthorized access of private Git repositories as long as the malicious user knows or brute-forces the location of the repository. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adobe/git-server/security/advisories/GHSA-cgj4-x2
alyst Notes: - CVE Program Container: References: - https://github.com/adobe/git-server/security/advisories/GHSA-cgj4-x2hh-2x93
CVE ID: CVE-2020-9710 State: PUBLISHED Published: 2020-08-19T13:52:46 Last Updated: 2024-08-04T10:34:39.912Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-989/ - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9712 State: PUBLISHED Published: 2020-08-19T13:55:39 Last Updated: 2024-08-04T10:34:39.947Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Security bypass Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-990/ - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9714 State: PUBLISHED Published: 2020-08-19T13:57:06 Last Updated: 2024-08-04T10:34:39.903Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Security bypass Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9715 State: PUBLISHED Published: 2020-08-19T00:00:00.000Z Last Updated: 2025-05-05T17:04:00.153Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use-after-free Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-991/ - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html - https://blog.exodusintel.com/2021/04/
s/ZDI-20-991/ - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html - https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/
CVE ID: CVE-2020-9716 State: PUBLISHED Published: 2020-08-19T14:07:31 Last Updated: 2024-08-04T10:34:39.958Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9717 State: PUBLISHED Published: 2020-08-19T14:08:28 Last Updated: 2024-08-04T10:34:39.922Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9718 State: PUBLISHED Published: 2020-08-19T14:09:28 Last Updated: 2024-08-04T10:34:39.942Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9719 State: PUBLISHED Published: 2020-08-19T14:11:22 Last Updated: 2024-08-04T10:43:03.588Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9720 State: PUBLISHED Published: 2020-08-19T14:12:45 Last Updated: 2024-08-04T10:43:03.616Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9721 State: PUBLISHED Published: 2020-08-19T14:13:27 Last Updated: 2024-08-04T10:43:03.599Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9722 State: PUBLISHED Published: 2020-08-19T14:14:52 Last Updated: 2024-08-04T10:43:03.599Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use-after-free Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9723 State: PUBLISHED Published: 2020-08-19T14:15:51 Last Updated: 2024-08-04T10:43:04.326Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
CVE ID: CVE-2020-9724 State: PUBLISHED Published: 2020-08-19T14:16:38 Last Updated: 2024-08-04T10:43:03.607Z Vendors: Adobe Products: Adobe Lightroom Problem Types: Insecure Library Loading Description: Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation could lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/lightroom/apsb20-51.html
CVE ID: CVE-2020-9725 State: PUBLISHED Published: 2020-09-10T18:35:57.974802Z Last Updated: 2024-09-17T03:07:09.079Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: FrameMaker Problem Types: CWE-121 Description: Adobe FrameMaker version 2019.0.6 (and earlier versions) lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This could be exploited to execute arbitrary code with the privileges of the current user. User interaction is required to exploit this vulnerability in that the target must open a malicious FrameMaker file. Additional Analyst Notes: - CVE Program Container: Refere
lity in that the target must open a malicious FrameMaker file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/framemaker/apsb20-54.html
CVE ID: CVE-2020-9726 State: PUBLISHED Published: 2020-09-10T18:36:06.974001Z Last Updated: 2024-09-17T04:05:06.867Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Adobe Products: FrameMaker Problem Types: CWE-125 Description: Adobe FrameMaker version 2019.0.6 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious FrameMaker file. Additional Analyst Notes: - CVE
lity in that the target must visit a malicious page or open a malicious FrameMaker file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/framemaker/apsb20-54.html
CVE ID: CVE-2020-9727 State: PUBLISHED Published: 2020-09-10T18:29:34.345611Z Last Updated: 2024-09-17T04:13:46.365Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-788 Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE ID: CVE-2020-9728 State: PUBLISHED Published: 2020-09-10T18:28:53.719147Z Last Updated: 2024-09-16T23:41:08.057Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-788 Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE ID: CVE-2020-9729 State: PUBLISHED Published: 2020-09-10T18:29:21.600721Z Last Updated: 2024-09-17T02:11:09.385Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-788 Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE ID: CVE-2020-9730 State: PUBLISHED Published: 2020-09-10T18:29:12.892198Z Last Updated: 2024-09-16T20:52:48.304Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-788 Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE ID: CVE-2020-9731 State: PUBLISHED Published: 2020-09-10T18:29:05.173886Z Last Updated: 2024-09-17T04:09:16.965Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-788 Description: A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb20-52.html
CVE ID: CVE-2020-9732 State: PUBLISHED Published: 2020-09-10T16:35:09.157429Z Last Updated: 2024-09-17T01:05:42.141Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe
ge containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9733 State: PUBLISHED Published: 2020-09-10T16:34:41.953574Z Last Updated: 2024-09-16T17:33:37.848Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-200 Description: An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9734 State: PUBLISHED Published: 2020-09-10T16:35:58.570566Z Last Updated: 2024-09-17T02:52:59.437Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.1 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.
e containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9735 State: PUBLISHED Published: 2020-09-10T16:35:16.453235Z Last Updated: 2024-09-16T23:21:35.569Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when search queries return the page containing the vulnerable field. Additional Analyst Notes: - CVE
a victim’s browser when search queries return the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9736 State: PUBLISHED Published: 2020-09-10T16:35:25.086632Z Last Updated: 2024-09-17T01:51:05.384Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when browsing to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program C
a victim’s browser when browsing to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html