PT-2018-11403 · Adobe · Experience Manager

Published 2018-08-29 · Updated 2018-11-08 · CVE-2018-12807

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.0 through 6.4

Description The issue is related to an input validation bypass, which could allow unauthorized modification of information if successfully exploited.

Recommendations For Adobe Experience Manager versions 6.0 through 6.4, update to a version that includes a fix for the input validation bypass issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-12807

Affected Products

Experience Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-12807 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12807 · Vendor Advisory
• https://helpx.adobe.com/security/products/experience-manager/apsb18-26.html · Vendor Advisory
• http://securityfocus.com/bid/105068 · Note
• http://securitytracker.com/id/1041470 · Note