CVE-2023-48487

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability in which a low-privileged attacker can lure a user to a crafted URL and cause malicious JavaScript to run in the victim’s browser. Affected component is the web page rendering c...

CVE-2023-48509

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based XSS in which a low-privileged attacker can lure a user to a crafted URL, causing arbitrary JavaScript to run in the victim’s browser. Impact is described as cross-site scripting with potential exposure of data and user ...

CVE-2023-48509 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48502

CVE-2023-48502 affects Adobe Experience Manager 6.5.x (6.5.18 and earlier). The vulnerability is a DOM-based Cross‑Site Scripting (XSS) that allows a low‑privileged attacker to lure a victim to a crafted URL and execute malicious JavaScript in the victim’s browser. The cited advisory APSB23-72 co...

CVE-2023-48494

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48494). An attacker with low privileges can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected product/version...

CVE-2023-48492 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48492

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48492). The issue allows a low-privileged attacker to lure a victim to a crafted URL referencing a vulnerable page, triggering malicious JavaScript execution in the victim’s browser. The CVE de...

CVE-2023-48606 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48599 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48485 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48485

CVE-2023-48485 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a DOM-based Cross-site Scripting (XSS) flaw where, if a low-privileged user visits a crafted URL referencing a vulnerable page, malicious JavaScript can execute in the victim’s browser. Reporte...

CVE-2023-48485 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

PT-2023-8096

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It may allow a low-privileged attacker to execute malicious JavaScript content within the context of a...

PT-2023-30856 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: A Cross-site Scripting DOM-based XSS issue allows malicious JavaScript content to be executed within the context of a victim's browser if a low-privileged attacker convinces th...

CVE-2023-48528: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48525: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48539: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48606: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48605: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48483: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...