Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-44488 EUVD-2022-47431GHSA-pr9x-x3m8-8fgx

AEM URL Redirection to Untrusted Site Security feature bypass

Published Dec 21, 2022 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

Affected products

VendorProductAffectedFixed
Adobe Experience Manager unspecified – ≤ 6.5.14.0, unspecified – ≤ None —

Advisories 1

References