{"id":"CVE-2022-42351","published":"2022-12-19T10:00:14Z","modified":"2025-04-23T16:28:05Z","title":"AEM Incorrect Authorization Security feature bypass","vendor":"Adobe","product":"Experience Manager","tier":"tail","description":{"text":"Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.","provenance":"source","from":"CVE.org"},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00983,"percentile":0.62181,"provenance":"source"},"cwes":[{"id":"CWE-863","name":"Incorrect Authorization"}],"references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html","tags":[]}],"priority":{"score":15.4,"factors":[{"name":"EPSS percentile","points":12.44},{"name":"CVSS severity","points":3.01}]},"vendorSlug":"adobe","affectedVersions":[{"vendor":"Adobe","product":"Experience Manager","versions":[">= unspecified, <= 6.5.14.0",">= unspecified, <= None"]}],"euvd":{"id":"EUVD-2022-45425","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-adobe-experience-manager-cwe-863"}}