CVE-2023-48495

CVE-2023-48495 affects Adobe Experience Manager 6.5.18 and earlier with a DOM-based XSS vulnerability. A low-priv attacker can trick a user into visiting a vulnerable page URL, allowing injected JavaScript to run in the victim’s browser. A patch exists in later AEM releases (upgrade to 6.5.19.0 o...

CVE-2023-48495 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48466

CVE-2023-48466 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a DOM-based Cross-site Scripting (XSS) vulnerability that could allow a low-privileged attacker to get a victim’s browser to execute malicious JavaScript when visiting a crafted URL referencing a vulnerable page. Impa...

CVE-2023-48484 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48484

CVE-2023-48484 concerns Adobe Experience Manager (AEM) versions 6.5.18 and earlier, affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue allows a low-privileged attacker who convinces a victim to visit a crafted URL referencing a vulnerable page to execute arbitrary JavaScr...

CVE-2023-48487

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability in which a low-privileged attacker can lure a user to a crafted URL and cause malicious JavaScript to run in the victim’s browser. Affected component is the web page rendering c...

CVE-2023-48509 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48509

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based XSS in which a low-privileged attacker can lure a user to a crafted URL, causing arbitrary JavaScript to run in the victim’s browser. Impact is described as cross-site scripting with potential exposure of data and user ...

CVE-2023-48502

CVE-2023-48502 affects Adobe Experience Manager 6.5.x (6.5.18 and earlier). The vulnerability is a DOM-based Cross‑Site Scripting (XSS) that allows a low‑privileged attacker to lure a victim to a crafted URL and execute malicious JavaScript in the victim’s browser. The cited advisory APSB23-72 co...

CVE-2023-48494

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48494). An attacker with low privileges can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected product/version...

CVE-2023-48492 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48492

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48492). The issue allows a low-privileged attacker to lure a victim to a crafted URL referencing a vulnerable page, triggering malicious JavaScript execution in the victim’s browser. The CVE de...

CVE-2023-48606 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48599 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48485 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48485

CVE-2023-48485 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a DOM-based Cross-site Scripting (XSS) flaw where, if a low-privileged user visits a crafted URL referencing a vulnerable page, malicious JavaScript can execute in the victim’s browser. Reporte...

CVE-2023-48485 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

PT-2023-8096

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It may allow a low-privileged attacker to execute malicious JavaScript content within the context of a...

CVE-2023-48477: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48476: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...