Lucene search

China National Vulnerability DatabaseCNVD-2023-99434

HistoryDec 15, 2023 - 12:00 a.m.

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-9943431)

2023-12-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

adobe experience manager

cross-site scripting

security vulnerability

version 6.5.18

payload injection

web script execution

content management

odobie

mobile applications

multi-site management

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

17.4%

JSON

Adobe Experience Manager (AEM) is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie (Adobe). The program supports mobile content management, marketing and sales campaign management and multi-site management. A security vulnerability exists in Adobe Experience Manager version 6.5.18 and prior versions, which can be exploited by an attacker to execute arbitrary web script or HTML via injection of a crafted payload.