All vulnerabilities

Servers and applications

CVE-2022-42351

Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.

Severity
Medium 4.3
Published
16 Dec 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.5.15.0
Sources
NVD

Affected software

SoftwareAffected versions
Adobe Experience ManagerServers and applications · cpe:a:adobe:experience_manager
  • Every version before 6.5.15.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-42351
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-42351