Adobe Security Bulletin

Adobe has released security updates for Adobe Experience Manager. These updates resolve an important  file type validation vulnerability (CVE-2017-3108) and two moderate information disclosure vulnerabilities (CVE-2017-3107 and CVE-2017-3110).

Affected product versions

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:

Please contact Adobe customer care for assistance with earlier AEM versions.

Vulnerability details

Acknowledgments

Adobe would like to thank the following individuals and organizations for reporting the relevant issues and for working with Adobe to help protect our customers:  

• Anonymously reported (CVE-2017-3107, CVE-2017-3108, CVE-2017-3110)

Revisions

August 9, 2017: The summary section incorrectly classified CVE-2017-3108 as Moderate.  CVE-2017-3108 is rated Important, as noted in the Vulnerability Details table, and the summary section has been corrected.