VDB
CVE-2024-41839
CVE-2024-41839
PUBLISHED
CVSS 4.099999904632568 MEDIUM
Adobe has released updates for Adobe Experience Manager (AEM). These updates resolve vulnerabilities rated critical, important and moderate. Successful exploitation of these vulnerabilities could result in arbitrary code execution, arbitrary file system read and security feature bypass. Vulnerability: Improper Input Validation (CWE-20) Impact: Arbitrary code execution Severity: Moderate CVSS: 4.1 CWE: CWE-20
EPSS 0.41% · 34.2th percentile
Risk Scores
CVSS 3.1
4.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
EPSS Score
0.41%
34.2th percentile
Timeline
- Jun 11, 2024 CVE Published
- Jul 23, 2024 PoC Published
- Jul 24, 2024 EPSS Score
- Aug 15, 2024 EPSS Score
- Sep 5, 2024 EPSS Score
- Sep 27, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 7, 2024 CVE Updated
- Oct 18, 2024 EPSS Score
- Nov 9, 2024 EPSS Score
- Nov 30, 2024 EPSS Score
- Dec 23, 2024 EPSS Score
References
- https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41839 advisory
- https://experienceleague.adobe.com/docs/experience-manager-cloud-service/release-notes/release-notes/release-notes-current.html?lang=en#release-notes patch