Solved

We have observed this vulnerability on our website built on AEM 6.5, Apache 2.4, cache enabled. Cache poison via malicious request headerServer/Application Misconfiguration Cache poisoningA cache poisoning vulnerability has been identified: issue at domain.comThe request header Handlechanges the response and is not part of the cache key, which means that this response is cached and will be served to other users on the site. https://owasp.org/www-community/attacks/Cache_Poisoning Anyone came across this? Appreciate any solutions around this. 

I'm trying to setup a basic email confirmation flow using segmentation to control language and tokens to control unique landing page links.As a user I recieve an email that says "please confirm your email address"I click a button that says "please confirm your email address" and I'm redirected to a landing page. The landing page contains a personalised link to my email preference center.I have an email that uses segmentation to control dynamic content. Email content is displayed in the correct language based on the segment the user belongs to. This all works fine. If I have a German lead, the German lead gets the email with German language content. All good so far. The email, "please confirm your email address", links to a Marketo landing page, "thanks for confirming your email address" which should exhibit the same dynamic content behavior for language display AND pull a single token from the lead record to customise one link on the landing page "view your email preference center".I'v

Hey fellow community members,I'm hoping someone out here can help me out with something that I came across recently. We had a lead come through as an MQL via a demo request form fill for a promo we're running. However when looking at it, the lead source had not been updated and still said they were a referral.Person Source / Lead Source is a hidden field that I've added on all our forms with a default value filled in - in the case of our demo forms, this is set to 'Demo Request'.I did some testing of my own which looked like this:1. Cleared my cache & cookies2. Filled out a Gated Content form to a) set the Person Source to 'Website Content' & b) to establish my known visitor record.3. With the browser now knowing its me, I went to the same form the lead filled out (Demo Request). It properly displayed the KV HTML and I submitted.4. I checked my test lead's Activity Details & got the same result as the earlier lead. See below.Gated Content Form Fill - Initial Test - All

Hi, I am new to API. My company does not have anyone who can use AEP using the postman. we just update things using the UI, and I would like to expand my skills with Postman. Any idea where I can start this from?

Hi, I'm new to Adobe Analytics and have a question regarding tracking user overlaps. I'm trying to understand if it's possible to identify the unique visitor (UV) overlap between programmatic channels (such as Amazon, DV360) and social channels (like Facebook, Pinterest, LinkedIn, etc.). From what I have learned, due to data privacy regulations, these platforms do not share user data with each other. Therefore, it seems that even if the same individual interacts with our advertisements across different platforms, we cannot capture this overlap in the data. Can anyone confirm if this understanding is correct, or if there are any workarounds or methods to measure such overlaps within Adobe Analytics? Thank you!

Hello, Has anyone created a report that shows both CURRENT Projects (Current Year) and COMPLETED Projects for ‘"This Month" (December)?

Hi,   I am wondering if anyone knows ways to block requests to AEM servlets ? There are attacks to servlets registered at paths say /bin with parameters that are invalid leading to query within the system i can think of ways to validate the values and then let the process but should we move to options like registering by sling resource types to avoid attacks or block domains via dispatcher or so ? does registering servlet via resource type for GET method help avert security vulnerability ? seeking ideas   regards,

Hi Everyone,I’m exploring the best ways to handle dynamic date ranges in Marketo’s Velocity scripting for a use case where opportunities need to be filtered based on whether their close date falls within a specific date range (e.g., today and 1 week prior). I’ve been testing some approaches and would love your insights on the best practices for this.I opted for text tokens over date tokens because they are easier to compare using .compareTo() in Velocity, avoid complications with time components and formatting, and provide flexibility for preformatted external values. However, I’m open to switching if date tokens can dynamically resolve and better meet the use case.What I’ve TriedPreformatted Text Tokens: Using text tokens (e.g., currentDate and dateRangeStart) formatted as yyyy-MM-dd to pass date values into the script.Hardcoded Testing: Replacing tokens with static dates to test the logic. This works but isn’t dynamic enough for long-term scalability.DateTool Attempts: Experimenting

HiI currently have a Workflow that is set to launch automatically at 2PM everyday. I am using Scheduler to launch the Workflow. However, I will need that Workflow to have a High Priority. I was wondering how I could set that Workflow to have a High Priority so that the Workflow executes before others. I have tried to go to OSGi Configurations to "Queue: Granite Workflow Queue"  and it does not have an option for me to specifically choose only that specific Workflow to have a High Priority. Please help me navigate how I could resolve this.  Best Regards.Sching

using purge API call to invalidate the adobe managed CDN cache with " X-Forwarded-Host" will invalidate or refresh the Cache on customer managed CDN automatically.we are using TTL based approach for cache invalidation on both adobe cdn & custom CDN. We want to invalidate the cache immediately before TTL expires on a publishing the content.curl -X PURGE "https://publish-p1234-e5467.adobeaemcloud.com/resource-path" \ -H 'X-AEM-Purge-Key: "my_purge_key" -H 'X-AEM-Edge-Key: "my_edge_key" -H 'X-Forwarded-Host: "my_forwarded_domain" 

Hello Experts, Is it possible to create a calculated metric in AEP for most recently viewed porduct with its timestamp.I tried, I'm able to get the prodID but timestamp is not reflecting. Also, in case we want 5th last viewed product, how can we acheive this using calculated metric. Thank you!Shivani

based on page sling resource type we need to hide a field dropdown options . Can anyone help me with java script code for this?Tried this<image-type jcr:primaryType="nt:unstructured" sling:resourceType="granite/ui/components/coral/foundation/form/select" fieldLabel="Image(s) Type" name="./imageType"> <granite:data jcr:primaryType="nt:unstructured" resourceType="${pageProperties.sling:resourceType}"/> <items jcr:primaryType="nt:unstructured"> <option-1 jcr:primaryType="nt:unstructured" text="Single Landscape Image" value="{Long}1" selected="{Boolean}true"/> <option-7 jcr:primaryType="nt:unstructured" text="Single Portrait Image" value="{Long}7"/> <option-2 jcr:primaryType="nt:unstructured" text="Two Landscape Images" value="{Long}2"/>

Hi Community,Is there any way to rollback changes to previous version of all aspects of campaign/Journey build in ajo? @satheeskannak @anuhya-y @mohan_dugganab @davidkangni 

How can I find an audience called "Audience_1" is used in an Offer, journey and/or campaign? Motive is to reduce number of audience below threshold deleting/optimizing unnecessary audiences.

Using ACS Commons => Manage Controlled Processes => Data Importer tool to bulk update nodes.ACS Commons - Data ImporterIt's a great tool but I'm not able to use it to clear a value. Here's an example: A .csv or .xlsx file containsColumn1           Column2path                  propertyName/nodelocation1  Some String1/nodelocation2  Some String2 I would like to remove the property value for all nodes in column1. Desired solution 1: there is an escape character that will replace the value with a null or empty space.Desired solution 2: there is a different tool that lets me delete the specific property from nodes in bulk (NOT delete the node. Just the property on the node) Limitations:- solution must be available for users who do not have access to backend. it must be accessible through AEM interface. CRXDE is accessible. the old CQ (siteadmin#/cf#) interface is accessible.-

I am new to using the Adobe Report Builder add-in in Excel. I would like to be able to filter a dimension with a segment, but that does not appear to be possible. When I drag the segment and drop in on the "row" with the dimension, it won't stay. When I select the ... the only options I am given to filter the dimension areWhen I select the drop-down for Type, it gives me the option of specific, but when I select it, the items it gives me are specific to that dimension. Is there any way to be able to filter a dimension by a segment? Thank you! 

In Customer Journey Analytics, is there the option to create a calculated metric that shows if there are pages that do not have the adobe data layer? We are specifically wondering for page view events that show if there are pages on our website that do not have the data layer spec.

New to Adobe Analytics, and I have seen comments and questions about the Column Sum metric. Is the Column Sum function only available if you have advanced calculated metrics? Thank you!

I am trying to set up a Landing Page to manage a set of subscriptions, and would like to have a subpage on confirm that shows a message "Thank you, you have opted out of (Subscription X)".  How do I pass a value for each of the check boxes from the Landing Page to a Sub Page? Looking at the documentation here, Create a landing page | Adobe Journey Optimizer it references an Additional Data section that sounds like it would do this, but I don't see that section available when I create a landing page.  What is the best way to go about passing this data through? Thanks in advance.

Looking to remove some fields from a Custom Object that we use primarily for demographic data. The issue is that any attempt to delete throws an error message that reads "Not able to complete your request. Please refresh to check if the object was updated by another request."I'm assuming this means the field is still in use in some case - but the issue is that the "Used By" section doesn't load. Likely because we use this object in some form on almost every Program in Marketo.Is there a REST API call to get a list of Programs that have a specific Custom Object field being used? I tried looking but it all related to Custom Fields and not Object fields.

Hi, Is it possible to copy a value of one contextData variable (cdv) into another using processing rule. I am trying to copy a cdv into a.osversion (this I guess if from sdk).

we are using AEM as a cloud service.Able to access experience fragment and its JSON data  in author https://author-p***-e***.adobeaemcloud.com/content/experience-fragments/Brand/us/en/site/header/master.htmlhttps://author-p***-e***.adobeaemcloud.com/content/experience-fragments/Brand/us/en/site/header/master.model.json but unable to access the same in publisher https://publish-p***-e***.adobeaemcloud.com/content/experience-fragments/Brand/us/en/site/header/master.htmlhttps://publish-p***-e***.adobeaemcloud.com/content/experience-fragments/Brand/us/en/site/header/master.model.json Do we need to enable some settings in dispatcher ?How to expose  experience fragments data to 3rd party (not AEM target) either in html or json .Do we need to write any custom logic to  expose XF  in publisher ?

Hi Community,I am trying to implement the Adobe Experience Platform (AEP) Web SDK to ingest data. I have followed all the steps outlined in the tutorials, but I’m running into an issue during testing.Here’s what I did:I copied the JavaScript library from Data Collection → Environments → Development.I included this JavaScript in a simple HTML page on my local PC.When I load the page and open the debugger, I see an error saying: Web SDK not found.Questions:Is it mandatory to move this implementation to a cloud-hosted page for it to work? Does the Web SDK not support local testing?During tag creation, does the Domain Setup field need to match the domain of the page where I’m testing? Could this mismatch be the reason for the "Web SDK not found"?For reference, these are the steps I have completed:Implement Adobe Experience Cloud with Web SDK tutorialhttps://experienceleague.adobe.com/en/docs/platform-learn/implement-web-sdk/overviewCreate an XDM schema for web datahttps://experienceleague.

Hi,I have a source set up to run on-demand in Adobe Experience Platform, and a dataflow run has been scheduled for it. I’d like to know if there’s a way to cancel or delete this scheduled run, either via the API or through the UI.Any guidance or documentation references would be greatly appreciated.Thanks in advance!

I'm trying to identify via javascript if I'm on an experiment page: like a page within the page delivery scope. Therefore I tried to check on the following adobe target events: At the moment I found that I can confirm I'm within a delivery page if the following event is fired:adobe.target.event.REQUEST_SUCCEEDED But then, this event is not fired on other pages within page delivery scope like the control variant or variant pages where clicktracking html is not available. I tried using the event:adobe.target.event.CONTENT_RENDERING_FAILEDThis last event fires on control and pages without the injected html, but also on any other page outside the page delivery scope.Any suggestions on how to identify only pages within the page delivery scopes of the activity?