CVE-2026-106634
CVE-2026-106634 · Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file system. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS 7.7 · Hoch · EPSS 0,5% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Betroffene Produkte und Versionen
adobe experience manager 6.5 lts
- Softwareversionen
- ≥ 0, ≤ 6.5 LTS SP3: Betroffen (custom)
- 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052, 6.5 LTS SP3 - Hotfix for GRANITE-75052: Nicht betroffen (custom)
Auf 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052, 6.5 LTS SP3 - Hotfix for GRANITE-75052 aktualisieren
adobe experience manager 6.5
- Softwareversionen
- ≥ 0, ≤ 6.5.25: Betroffen (custom)
- 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052, 6.5.25 - Hotfix for GRANITE-75052: Nicht betroffen (custom)
Auf 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052, 6.5.25 - Hotfix for GRANITE-75052 aktualisieren