Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
No data.
No data.
References
History
Wed, 05 Aug 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe adobe Experience Manager Adobe experience Manager Cloud Service |
|
| Vendors & Products |
Adobe
Adobe adobe Experience Manager Adobe experience Manager Cloud Service |
Thu, 16 Jul 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 14 Jul 2026 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. | |
| Title | Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2026-07-14T19:21:02.330Z
Updated: 2026-07-16T14:44:17.004Z
Reserved: 2026-05-21T15:28:38.136Z
Link: CVE-2026-48310
Vulnrichment
Updated: 2026-07-16T14:44:06.983Z
NVD
No data.
Redhat
No data.