CyberCrime News

[Mshaji]

There is a news tweeted from @cybercrimenews about CQ5 being vulnerable to hacker attacks. Any comments from Adobe Professionals on this news?

[Lokesh_Shivalingaiah]

Yea.. Eager to know on this and would like to hear from the security team

[smacdonald2008]

I will get someone who tests and works with security to comment on this. 

[rofemaster]

Hi,

Adobe takes reports of vulnerabilities in AEM very seriously. You can find more information about incident response at Adobe here.

We generally advise installing all recommended hot fixes and service packs as soon as they become available.

Regards,
AEM Security Team

[Lokesh_Shivalingaiah]

Thanks for your reply rofemaster !

[rofemaster · Accepted solution]

UPDATE: A  CQ5 vulnerability has been recently reported via PSIRT. CQ 5.5 and newer CQ and AEM releases already contain the fix. Adobe recommends users of CQ 5.4 update their installations by applying the hot fix.