组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| Adobe Experience Manager Forms - Insecure Deserialization | 严重 | — | — | PoCEXP | ||
| Adobe AEM JCR Compare Exposure | 低危 | — | — | PoCEXP | ||
| Adobe Experience Manager (AEM) - Anonymous JCR Node Creation | 高危 | — | — | PoCEXP | ||
| AEM QueryBuilder JSON Exposure - Bypass | 严重 | — | — | PoCEXP | ||
| Adobe Experience Manager - Dispatcher Bypass | 高危 | — | — | PoCEXP | ||
| Adobe Experience Manager ≤ 6.5.23.0 - XML Injection | 中危 | 4.3 | — | PoCEXP | ||
| Adobe Experience Manager ≤ 6.5.23.0 – SSRF | 中危 | 6.5 | — | PoCEXP | ||
| Adobe Experience Manager Forms - Insecure Deserialization | 严重 | 10.0 | — | PoCEXP | ||
| CRXDE Lite - Exposure | 低危 | — | — | PoCEXP | ||
| Adobe AEM Misc Admin Dashboard Exposure | 高危 | — | — | PoCEXP | ||
| AEM GQLServlet | 低危 | — | — | PoCEXP | ||
| AEM UserInfo Servlet Credentials Exposure | 低危 | — | — | PoCEXP | ||
| AEM WCM Suggestions Servlet | 低危 | — | — | PoCEXP | ||
| Adobe AEM Security Users Exposure | 中危 | — | — | PoCEXP | ||
| AEM QueryBuilder Internal Path Read | 中危 | — | — | PoCEXP | ||
| Adobe AEM Installed OSGI Bundles | 低危 | — | — | PoCEXP | ||
| Adobe AEM Offloading Browser | 中危 | — | — | PoCEXP | ||
| Query hashed password via QueryBuilder Servlet | 中危 | — | — | PoCEXP | ||
| Adobe AEM Explorer NodeTypes Exposure | 高危 | — | — | PoCEXP | ||
| AEM Dump Content Node Properties | 中危 | — | — | PoCEXP |