Vulnerability Description
Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Experience Manager | < 6.5.15.0 |
| Adobe | Experience Manager Cloud Service | < 2022.10.0 |
Related Weaknesses (CWE)
References
- https://helpx.adobe.com/security/products/experience-manager/apsb22-59.htmlVendor Advisory
- https://helpx.adobe.com/security/products/experience-manager/apsb22-59.htmlVendor Advisory
FAQ
What is CVE-2022-42351?
CVE-2022-42351 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage t...
How severe is CVE-2022-42351?
CVE-2022-42351 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-42351?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Experience Manager, Adobe Experience Manager Cloud Service.