Description
Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Adobe Experience Manager | ≤ 6.5.20 | — |
Advisories 2
- WID-SEC-2024-1351 Adobe Experience Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 7, 2024
- NCSC-2024-0259 Kwetsbaarheden verholpen in Adobe Experience Manager NCSC-NL (Netherlands) · Jun 14, 2024