CVE-2024-26054 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-26058

CVE-2024-26058 affects Adobe Experience Manager 6.5.20 and earlier with a DOM-based XSS that can execute JavaScript in the victim’s browser after user interaction. The CVSSv3.1 base score is 5.4 (Medium). Multiple connected documents confirm this family of issues and that Adobe released fixes via...

CVE-2024-26058 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user...

CVE-2024-26058 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user...

CVE-2024-36152 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36152 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36152

Affected software : Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue : stored Cross‑Site Scripting (XSS) in vulnerable form fields allowing injection of malicious JavaScript. Impact : could cause the attacker’s script to run in a user’s browser when loading pages containing the vulnerable...

CVE-2024-26091

CVE-2024-26091 is a DOM-based XSS affecting Adobe Experience Manager 6.5.20 and earlier. The issue could allow an attacker to run arbitrary JavaScript in the victim’s browser, typically requiring user interaction. The connected advisories indicate Adobe released updates (APSB24-28) to address vul...

CVE-2024-26091 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically...

CVE-2024-26091 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically...

CVE-2024-26113

Adobe Experience Manager 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2024-26113). An attacker must entice a user to visit a vulnerable URL; this could allow malicious JavaScript to run in the victim’s browser context. Updates referenced in APSB24-2...

CVE-2024-26113 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

CVE-2024-26113 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

CVE-2024-36167

CVE-2024-36167 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS (CWE-79) in vulnerable form fields. Malicious JavaScript could run in a victim’s browser when loading the affected page. The CVSSv3.1 base score is 5.4 (Medium) with user interaction required for exploitati...

CVE-2024-36176 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36176 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36167 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36167 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36176

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields, enabling malicious JavaScript execution in a victim’s browser when visiting pages containing those fields. Root cause: DOM/Stored XSS in user-supplied input. Affected product: AEM 6.5...

CVE-2024-36226

CVE-2024-36226 affects Adobe Experience Manager 6.5.20 and earlier. The issue is an Improper Input Validation that could bypass security features and affect page integrity; exploitation requires user interaction. AEM versions prior to 6.5.21 are also noted across multiple sources as vulnerable to...