Lucene search

[email protected]CVE-2018-12807

HistoryAug 29, 2018 - 1:29 p.m.

CVE-2018-12807

2018-08-2913:29:00

CWE-20

[email protected]

web.nvd.nist.gov

adobe

experience manager

input validation

bypass

vulnerability

unauthorized

info modification

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information modification.

Affected configurations

Vulners

NVD

Node

n\/aadobe_experience_manager_versions_6.4\,_6.3\,_6.2\,_6.1\,_and_6.0Range≤6.4

n\/aadobe_experience_manager_versions_6.4\,_6.3\,_6.2\,_6.1\,_and_6.0Range≤6.3

n\/aadobe_experience_manager_versions_6.4\,_6.3\,_6.2\,_6.1\,_and_6.0Range≤6.2

n\/aadobe_experience_manager_versions_6.4\,_6.3\,_6.2\,_6.1\,_and_6.0Range≤6.1

n\/aadobe_experience_manager_versions_6.4\,_6.3\,_6.2\,_6.1\,_and_6.0Range≤6.0

CPENameOperatorVersion
adobe:experience_manageradobe experience managerle6.1.2.16

CPE	Name	Operator	Version
adobe:experience_manager	adobe experience manager	le	6.1.2.16

CNA Affected

[
  {
    "product": "Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105068

www.securitytracker.com/id/1041470

helpx.adobe.com/security/products/experience-manager/apsb18-26.html

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

Related for CVE-2018-12807

nvd1 cvelist1 prion1 adobe1