CVE-2022-30683
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the security feature of the encryption mechanism in the backend . An attacker could leverage this vulnerability to decrypt secrets, however, this is a high-complexity attack as the threat actor needs to already possess those secrets. Exploitation of this issue requires low-privilege access to AEM.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.32%
- CWE
- CWE-657
- Published
- 2022-09-16
- Last modified
- 2026-03-13
Affected products
- Adobe Experience Manager
Weakness type
Related vulnerabilities
- CVE-2026-48399 — Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
- CVE-2026-39888 — PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
- CVE-2026-30792 — RustDesk Client Blindly Merges Unauthenticated Strategy Payloads, Bypassing Local Security Settings
- CVE-2025-54255 — Acrobat Reader | Violation of Secure Design Principles (CWE-657)
- CVE-2025-24887 — OpenCTI bypass of protected attribute update
- CVE-2024-57957 — Vulnerability of improper log information control in the UI framework module...
- CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation
- CVE-2023-29320 — ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw