CVE-2023-48468 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48501 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48501

CVE-2023-48501 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker, with user interaction, to inject malicious scripts that execute in a victim’s browser when visiting ...

CVE-2023-48607 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48564 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48564

Adobe Experience Manager 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing low-privilege attackers to inject JavaScript executed in victims’ browsers. The issue, CVE-2023-48564, is documented with a low-privilege (PR:L), low im...

CVE-2023-48607

CVE-2023-48607 is an Adobe Experience Manager (AEM) reflected XSS affecting 6.5.18 and earlier, allowing a low-privileged attacker to lure a victim to a crafted URL and execute JavaScript in the browser. Affected component is the AEM web UI/page rendering logic referenced by the CVE entry; root c...

CVE-2023-48454 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48454

Adobe Experience Manager (AEM) version 6.5.18 and earlier is affected by a DOM‑based Cross‑Site Scripting (XSS) vulnerability. The issue can be triggered when a low‑privileged attacker persuades a victim to visit a URL referencing a vulnerable page, allowing malicious JavaScript to execute in the...

CVE-2023-48503 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48503

CVE-2023-48503 affects Adobe Experience Manager 6.5.18 and earlier with a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when they visit the page containing the field. CVSS v3.1 base score 5.4 (Medi...

CVE-2023-48503 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48589

CVE-2023-48589 is a DOM-based Cross-site Scripting vulnerability in Adobe Experience Manager (AEM) versions 6.5.18 and earlier . The issue allows a low-privileged attacker to lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The...

CVE-2023-48538 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48538

CVE-2023-48538 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a stored XSS in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with JavaScript executing in a victim’s browser when visiting the affected page. According to the C...

CVE-2023-48538 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48473

Summary for CVE-2023-48473 (Adobe Experience Manager) : AEM 6.5.18 and earlier are affected by a DOM-based XSS vulnerability that can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page. The exposed impact is described as low confident...

CVE-2023-48473 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48496 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48496 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...