Skip to content
OpenAdvisories
Medium WID-SEC-2022-2301 34 CVEs

Adobe Experience Manager: Mehrere Schwachstellen

Published Dec 13, 2022 · Updated Dec 22, 2022 · Revision 2 · de-DE

Vendor: Adobe Product: Experience Manager Product: Experience Manager < 6.5.15.0 Product: Experience Manager AEM Cloud Service Release < 2022.10.0

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Adobe Experience Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Sicherheitsmaßnahmen zu umgehen.

Product

Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 34

  • Medium 5.4
    CVE-2022-30679

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-35693

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-35694

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-35695

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-35696

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42345

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42346

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42348

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42349

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42350

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42352

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42354

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42356

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42357

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42360

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42362

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42364

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42365

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42366

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-42367

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44462

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44463

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44465

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44466

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44467

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44468

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44469

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44470

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44471

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44473

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44474

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2022-44510

    AEM Reflected XSS Arbitrary code execution

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Experience Manager
  • Medium 4.3
    CVE-2022-42351

    AEM Incorrect Authorization Security feature bypass

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality inf…

    Adobe Experience Manager
  • Low 3.5
    CVE-2022-44488

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploit…

    Adobe Experience Manager

Revision history

  1. #2

    CVE-2022-44510 ergänzt

  2. #1

    Initiale Fassung

References