Lucene search
PRIOn knowledge basePRION:CVE-2022-38439HistorySep 23, 2022 - 7:15 p.m.
Cross site scripting
2022-09-2319:15:00
PRIOn knowledge base
www.prio-n.com
adobe experience manager
cross-site scripting
xss vulnerability
javascript
browser
low-privilege access
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim’s browser. Exploitation of this issue requires low-privilege access to AEM.
| CPE | Name | Operator | Version |
|---|---|---|---|
| experience_manager | lt | 6.5.14.0 |
Related
nvd
nvd
CVE-2022-38439
2022-09-23 19:15:14
cve
cve
CVE-2022-38439
2022-09-23 19:15:14
cvelist
cvelist
CVE-2022-38439 AEM Reflected XSS Arbitrary code execution
2022-09-13 00:00:00
cnvd
cnvd
nessus
nessus
adobe
adobe
APSB22-40: Security updates available for Experience Manager
2022-09-13 00:00:00