Skip to content
OpenAdvisories

Archive

10 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /10 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-11998 Public exploit EPSS 49%

    Remote code execution in Apache ActiveMQ

    A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.or…

    activemq org.apache.activemq:activemq-parent Ubuntu Maven
  • Critical 9.0
    CVE-2020-9734

    Stored XSS in AEM Forms component

    The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.1 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be e…

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9742

    Reflected XSS in AEM Inbox module

    AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below) and 6.3.3.8 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Inbox calendar feature. These scripts …

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9741

    Stored XSS in AEM Forms Components

    The AEM forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be e…

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9732

    Stored XSS in AEM Sites Components

    The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be …

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9740

    Stored XSS in AEM Design Importer Component

    AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Impo…

    Adobe Experience Manager