Description
Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does not require user interaction.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Adobe | Adobe Experience Manager | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-52492 | Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does not require user interaction. |
References
History
Fri, 19 Sep 2025 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:adobe:experience_manager:-:*:*:*:aem_cloud_service:*:*:* |
Mon, 07 Oct 2024 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Servlet - /bin/wcm/contentfinder/asset/view?itemResourceType allows users to execute internal AEM code | Adobe Experience Manager | Improper Access Control (CWE-284) |
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2024-10-07T14:19:43.734Z
Reserved: 2023-11-16T23:29:25.367Z
Link: CVE-2023-48441
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-12-15T11:15:10.463
Modified: 2025-09-19T17:19:39.570
Link: CVE-2023-48441
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses