Vulnerability in Adobe Experience Manager
CVE-2019-16469
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
EPSS: 0.706 (98.7th percentile) — read the EPSS interpretation.
Affected products
- Adobe Experience Manager — versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 versions
Public proof-of-concept exploits
References
- helpx.adobe.com/security/products/experience-manager/apsb20-01.html (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-16469?
- CVE-2019-16469 is a vulnerability in Adobe Experience Manager. Published 2020-01-15.
- Is CVE-2019-16469 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.