CVE-2020-24444

Blind SSRF in Forms add-on for AEM

State: Published
Severity: 5.8 Medium
Published: Dec 10, 2020
Updated: Sep 17, 2024
Reserved: Aug 19, 2020

Description

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability could be exploited by an unauthenticated attacker to gather information about internal systems that reside on the same network.

Scores

CVSS	Score	Vector	Source
3.1	5.8 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N	adobe

Weaknesses

CWE-918 Server-Side Request Forgery (SSRF) (CWE-918)

Affected Products

Product	Versions
Experience ManagerAdobe	<= Forms SP6 add-on for AEM 6.5.6.0Affected <= Forms SP8 add-on for AEM 6.4.8.2Affected <= NoneAffected

References

https://helpx.adobe.com/security/products/experience-manager/apsb20-72.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.