S4E just found a medium vulnerable javascript library scanner
medium·Product Based Web Vulnerabilities·Updated Dec 16, 2023

AEM - Adobe Experience Manager UserInfo Servlet Scanner

If UserInfoServlet is exposed, it allows to bruteforce credentials. You can get valid usernames from jcr:createdBy, jcr:lastModifiedBy, cq:LastModifiedBy attributes of any JCR node.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
1
Times Used
by S4E users
1
Assets Scanned
domains & IPs
1
Vulnerabilities Found
confirmed findings
References
Detail

AEM - Adobe Experience Manager is an enterprise-grade CMS. AEM is widely used by high-profile companies. AEM is big and complex. AEM also has 26 known CVEs. Misconfigured AEM applications can cause many critical vulnerabilities.

Solution Advice

Access restriction should be applied.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →
Similar Tools
low
AEM - Adobe Experience Manager QueryBuilder Feed Servlet Scanner
→low
AEM - Adobe Experience Manager GQLServlet Scanner
→low
AEM - Adobe Experience Manager Invalidate / Flush Cached Pages Scanner
→low
AEM - Adobe Experience Manager QueryBuilder Json Servlet Scanner
→critical
AEM - Adobe Experience Manager CRX Bypass Vulnerability Scanner
→critical
AEM - Adobe Experience Manager Groovy console Scanner
→medium
AEM - Adobe Experience Manager QueryBuilder Internal Path Read Vulnerability Scanner
→low
AEM - Adobe Experience Manager WCM Suggestions Servlet Scanner
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.