Any tier · 18 specialized tests

Adobe Experience Manager (AEM) Security

Dispatcher selectors, servlet exposure, QueryBuilder RCE

What Gets Tested

Dispatcher misconfig selectors
Servlet exposure (.json/.infinity.json/.xml)
QueryBuilder RCE (CVE-2023-22952)
AEM Forms SSRF probe
/libs/ + /etc.clientlibs/ + /content/dam/ enumeration
Nuclei aem/ template pack

How It Works

1

Detection

Fingerprint via /libs/, /etc.clientlibs/, AEM-specific headers.

2

Dispatcher

Probe Dispatcher rules for selector-bypass permissive rules.

3

Servlets

Enumerate .json / .infinity.json / .xml servlet surfaces.

4

QueryBuilder

Test /bin/querybuilder.json for CVE-2023-22952 chain.

Compliance Coverage

OWASP-A03 (Injection) OWASP-A05 (Misconfiguration)

Adobe Experience Manager (AEM) Security

€159

Any tier · One-time per scan

18 specialized tests + AI-powered analysis

Start Your Scan

Select this addon when configuring your scan

Related Add-Ons