« Volver al listado

CVE-2019-7129

Estado: ModificadaMedia (6.1)—

Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Experience Manager Forms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-7129",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Experience Manager Forms",
          "versions": [
            {
              "status": "affected",
              "version": "Adobe Experience Manager Forms versions"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-05-29T18:29:01.133",
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/aem-forms/apsb19-24.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://helpx.adobe.com/security/products/aem-forms/apsb19-24.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure."
    },
    {
      "lang": "es",
      "value": "Las versiones 6.2, 6.3 y 6.4 de Adobe Experience Manager Forms Presentan una vulnerabilidad incorporada de tipo cross-site scripting. La explotación con éxito conllevaría a la divulgación de información confidencial."
    }
  ],
  "lastModified": "2026-06-17T02:40:08.233",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:experience_manager_forms:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51FB0F12-34E1-41AA-A930-4239902F0A40"
            },
            {
              "criteria": "cpe:2.3:a:adobe:experience_manager_forms:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4D754B0-73C7-42A1-9F11-5E5DF57D5B8B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:experience_manager_forms:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85C6E090-61DE-4C7C-AF07-315DCAD2CBCE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}