Bulletin ID
Security updates available for Adobe Experience Manager | APSB19-09
|
Date Published |
Priority |
---|---|---|
APSB19-09 |
January 22, 2019 |
2 |
Summary
Affected product versions
Product |
Version |
Platform |
---|---|---|
Adobe Experience Manager |
6.4 6.3 6.2 6.1 6.0 |
All |
Solution
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:
Product |
Version |
Platform |
Priority |
Availability |
---|---|---|---|---|
Adobe Experience Manager |
6.4 |
All |
2 |
|
6.3 |
All |
2 |
||
6.2 |
All |
2 |
Please contact Adobe customer care for assistance with earlier AEM versions.
Vulnerability details
Vulnerability Category |
Vulnerability Impact |
Severity |
CVE Numbers |
Affected Version |
Download Package |
---|---|---|---|---|---|
Stored Cross-site Scripting |
Sensitive Information disclosure |
Important |
CVE-2018-19726 |
AEM 6.0 AEM 6.1 AEM 6.2 AEM 6.3 AEM 6.4 |
|
Reflected Cross-site Scripting |
Sensitive Information disclosure |
Moderate |
CVE-2018-19727
|
AEM 6.3 AEM 6.4
|
Note: the packages listed in the table above are the minimum fix packs to address the relevant vulnerability. For the latest versions, please see the release notes links referenced above.
Note: If you are running the AEM version earlier than AEM 6.2 and need assistance, please contact Adobe Customer Care.