CVE-2020-9737: Stored XSS in AEM's Content Repository Development Environment
AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9737?
CVE-2020-9737 has a severity rating of medium due to its potential impact from stored XSS attacks.
How do I fix CVE-2020-9737?
To resolve CVE-2020-9737, upgrade Adobe Experience Manager to version 6.5.6.0 or later, 6.4.8.2 or later, or 6.3.3.9 or later.
Which versions of Adobe Experience Manager are affected by CVE-2020-9737?
CVE-2020-9737 affects AEM versions 6.5.5.0 and below, 6.4.8.1 and below, 6.3.3.8 and below, and 6.2 SP1-CFP20 and below.
What type of vulnerability is CVE-2020-9737?
CVE-2020-9737 is a stored XSS vulnerability that allows attackers to store malicious scripts.
Who is impacted by CVE-2020-9737?
Users with access to the Content Repository Development Environment in the affected versions of Adobe Experience Manager are impacted by CVE-2020-9737.