3.5
CVE-2023-48608
- EPSS 0.76%
- Veröffentlicht 15.12.2023 11:15:44
- Zuletzt bearbeitet 19.09.2025 17:19:39
- Erkennungen
LoginAdobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Input Validation vulnerability. A low-privileged attacker could leverage this vulnerability to achieve a low-integrity impact within the application. Exploitation of this issue requires user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Experience Manager Version <= 6.5.18
Adobe ≫ Experience Manager Version - SwEdition aem_cloud_service
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.76% | 0.503 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Adobe | 3.5 | 2.1 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://helpx.adobe.com/security/products/experience-manager/apsb23-72.html