CVE-2024-36175 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36151 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user...

CVE-2024-36146 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-26121 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36216 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2024-36164 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36161 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-32995

Denial of service DoS vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-32995

Denial of service DoS vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-32995

CVE-2024-32995 describes a denial-of-service in the Huawei HarmonyOS/AMS module. Documents consistently cite an availability impact and a DoS condition in the AMS component, with CVSSv3.1 indicators showing a Local attack vector, Low attack complexity, No privileges required (higher impact on ava...

CVE-2024-32995

Denial of service DoS vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-32995

Denial of service DoS vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-25042 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A denial of service DoS issue exists in the AMS module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no information about a new...

ams-metal.de Cross Site Scripting vulnerability OBB-3915120

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52716

Vulnerability of starting activities in the background in the ActivityManagerService AMS module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52716

Vulnerability of starting activities in the background in the ActivityManagerService AMS module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52716

CVE-2023-52716 describes a vulnerability in the ActivityManagerService (AMS) background-start path that can impact availability. Documented CVSS: Network attack, low complexity, no privileges required, no user interaction, with high impact on availability (CVSS 3.1 base score 7.5). Connected sour...

ams-group.net Cross Site Scripting vulnerability OBB-3901384

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ams-paints-and-accessories.co.uk Cross Site Scripting vulnerability OBB-3883863

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-26118 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...