The version of Adobe Experience Manager installed on the remote host is prior to 6.5.10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-82 advisory.

  - Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure     handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the     current user. User interaction is required to exploit this vulnerability. (CVE-2021-42725)

  - Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when     creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve     arbitrary code execution. Malicious JavaScript may be executed in a victim's browser when they browse to     the page containing the vulnerable field. (CVE-2021-40711)

  - Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation     vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to     achieve server-side denial of service. (CVE-2021-40712)

  - Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper certificate validation     vulnerability in the cold storage component. If an attacker can achieve a man in the middle when the cold     server establishes a new certificate, they would be able to harvest sensitive information.
    (CVE-2021-40713)

  - Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a reflected Cross-Site Scripting     (XSS) vulnerability via the accesskey parameter. If an attacker is able to convince a victim to visit a     URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the     victim's browser (CVE-2021-40714)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Experience Manager 6.5.0.0 < 6.5.10.0 Multiple Vulnerabilities (APSB21-82)

high Nessus Plugin ID 153399

No changelogs found