« Volver al listado

CVE-2019-8089

Estado: ModificadaMedia (6.1)—

Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Experience Manager Forms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-8089",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Experience Manager Forms",
          "versions": [
            {
              "status": "affected",
              "version": "Adobe Experience Manager Forms versions 6.3-6.5"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-10-22T21:15:10.940",
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/aem-forms/apsb19-50.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://helpx.adobe.com/security/products/aem-forms/apsb19-50.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure."
    },
    {
      "lang": "es",
      "value": "La versiones 6.3 hasta 6.5 de Adobe Experience Manager Forms, presentan una vulnerabilidad de tipo cross-site scripting reflejada. Su explotación con éxito podría conllevar a la divulgación de información confidencial."
    }
  ],
  "lastModified": "2026-06-17T02:41:28.420",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:experience_manager_forms:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4D754B0-73C7-42A1-9F11-5E5DF57D5B8B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:experience_manager_forms:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85C6E090-61DE-4C7C-AF07-315DCAD2CBCE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:experience_manager_forms:6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04B49C42-AC63-4063-8A76-CBC39B5A2203"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}