Technically, 6.4 should be similar. On the version, you should consider upgrading - https://helpx.adobe.com/support/programs/eol-matrix.html

You'll should be okay as long as the website traffic load on the servers are not high, that is if the website usage is not high. Again this is a general question and also need to see what content is being served, regions, languages, APIs/integrations etc. need to be accounted for. We did something s...

Usually AEM 6.x on-premise license is perpetual - linked to the contract with Adobe. The license key does not contain an expiration date. 1. You can check the license on your AEM Author at "<server>/system/console/productinfo" 2. I don't think you CMS will stop working on the expiration date, but yo...

@Jörg_Hoh @Shiv_Prakash_Patel this may be a lot of work?Many projects built with AEM Archetype still use javax.* referencesjavax.servletjavax.annotationjavax.jcrhttps://github.com/adobe/aem-project-archetype/blob/develop/src/main/archetype/pom.xml  <!-- Servlet API --> <dependency> <groupId>javax....

Thanks @gkalyan  for the help! Updates on the fix:1. This is not cache poisoning.2. The error was happening when the site was being called with a manipulated header as "Handle: somestring"3. While "Handle" is not a standard header and a custom one, we verified that default output instead of a 403 is...

how can we do this?our configs:/conf.d/available_vhosts/aem-site_publish.vhost <IfModule mod_headers.c> Header set X-XSS-Protection "1; mode=block" Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" # Header always add X-Vhost "publish" Header merge X...

We have Server version: Apache/2.4.62 installed, this says was fixed in 2.4.55

thanks @gkal , will try this.

We have observed this vulnerability on our website built on AEM 6.5, Apache 2.4, cache enabled. Cache poison via malicious request headerServer/Application Misconfiguration Cache poisoningA cache poisoning vulnerability has been identified: issue at domain.comThe request header Handlechanges the res...