CVE-2023-38215

CVE-2023-38215 affects Adobe Experience Manager (AEM) versions 6.5.17 and earlier. It is a reflected XSS vulnerability: a low-privilege attacker lures a victim to a crafted URL, causing malicious JavaScript to execute in the user’s browser. CVSS v3.1 base score 5.4 (Medium): AV:N/AC:L/PR:L/UI:R/S...

CVE-2023-38215 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

Adobe Experience Manager 6.5.0.0 < 6.5.18.0 Multiple Arbitrary code execution (APSB23-43)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.18.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-43 advisory. - Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting XSS...