Kritik CVSS 9.6
CVE-2026-90531: Experience Manager: XML dış varlık (XXE)
Açıklama (NVD)
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Özet bilgiler
- Ürün
- Adobe Experience Manager
- CVSS v3.1
- 9.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - EPSS
- %1,40 (yüzdelik 73)
- CWE
- CWE-611
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| adobe-experience-manager | — | 6.5 | — |
| adobe-experience-manager | — | 6.5.25.0 | — |
| adobe-experience-manager | — | 2026.9.28187 | — |