Adobe Security Updates — September 2020

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 5

• Critical 9.0
  CVE-2020-9732 Stored XSS in AEM Sites Components
  EPSS 2.8%
• Critical 9.0
  CVE-2020-9734 Stored XSS in AEM Forms component
  EPSS 1.9%
• Critical 9.0
  CVE-2020-9740 Stored XSS in AEM Design Importer Component
  EPSS 1.9%
• Critical 9.0
  CVE-2020-9741 Stored XSS in AEM Forms Components
  EPSS 1.9%
• Critical 9.0
  CVE-2020-9742 Reflected XSS in AEM Inbox module
  EPSS 1.8%

All vulnerabilities 18