CVE-2024-26063

EUVD-2024-23357
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information, potentially bypassing security measures. Exploitation of this issue does not require user interaction.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
adobeexperience_manager
𝑥
< 6.5.20.0
adobeexperience_manager
𝑥
< 2024.3.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
adobeexperience_manager
𝑥
≤ 6.5.19
ADP
Common Weakness Enumeration
References
https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html
https://helpx.adobe.com/security/products/experience-manager/apsb24-05.html