Technically, 6.4 should be similar. On the version, you should consider upgrading - https://helpx.adobe.com/support/programs/eol-matrix.html

We’re exploring a migration from AEM 6.5 (6.5.19, Java 11, ~100-page static site) to AEM as a Cloud Service.Curious what others have experienced, like key things to watch out for migration challenges, no-go's, unexpected challenges.  Our website uses the typical1. 1 Language, region - en, us2. Asset...

You'll should be okay as long as the website traffic load on the servers are not high, that is if the website usage is not high. Again this is a general question and also need to see what content is being served, regions, languages, APIs/integrations etc. need to be accounted for. We did something s...

That's a great question, though I'm answering an old question (from a deleted-account), but the question is very relevant even today (2025), and it's a concern many of us share as well when thinking about the long-term maintenance of our on-premise instances. AEM is a Curated Product Stack, Not Just...

Usually AEM 6.x on-premise license is perpetual - linked to the contract with Adobe. The license key does not contain an expiration date. 1. You can check the license on your AEM Author at "<server>/system/console/productinfo" 2. I don't think you CMS will stop working on the expiration date, but yo...

@Jörg_Hoh @Shiv_Prakash_Patel this may be a lot of work?Many projects built with AEM Archetype still use javax.* referencesjavax.servletjavax.annotationjavax.jcrhttps://github.com/adobe/aem-project-archetype/blob/develop/src/main/archetype/pom.xml  <!-- Servlet API --> <dependency> <groupId>javax....

Thanks @gkalyan  for the help! Updates on the fix:1. This is not cache poisoning.2. The error was happening when the site was being called with a manipulated header as "Handle: somestring"3. While "Handle" is not a standard header and a custom one, we verified that default output instead of a 403 is...

how can we do this?our configs:/conf.d/available_vhosts/aem-site_publish.vhost <IfModule mod_headers.c> Header set X-XSS-Protection "1; mode=block" Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" # Header always add X-Vhost "publish" Header merge X...

We have Server version: Apache/2.4.62 installed, this says was fixed in 2.4.55

thanks @gkal , will try this.