Skip to content
OpenAdvisories
Medium WID-SEC-2023-2318 2 CVEs

Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Sep 12, 2023 · Updated Sep 12, 2023 · de-DE

Vendor: Adobe Product: Experience Manager Product: Experience Manager < 6.5.18.0 Product: Experience Manager < AEM Cloud Service Release 2023.8 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Adobe Experience Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 2

  • Medium 5.4
    CVE-2023-38214

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-38215

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager

Revision history

  1. #1

    Initiale Fassung

References