CVE-2023-48496

CVE-2023-48496: Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. An attacker with low privileges can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The issue is associa...

CVE-2023-48441 Adobe Experience Manager | Improper Access Control (CWE-284)

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does not require user interaction...

CVE-2023-48441

CVE-2023-48441 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The vulnerability is an Improper Access Control issue that can be exploited without user interaction to achieve a low-confidentiality impact within the application. CVSSv3.1 base score is 5.3 (medium) with network access, n...

CVE-2023-48591 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48591

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based XSS vulnerability (CVE-2023-48591) that allows a low-privileged attacker to lure a victim to a crafted URL and have malicious JavaScript run in the victim’s browser. The CVE is documented with a CVSS v3.1 base score of 5...

CVE-2023-48505

CVE-2023-48505 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page conta...

CVE-2023-48567 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48567 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48567

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability (CVE-2023-48567) that can execute attacker-supplied JavaScript in the victim’s browser when a vulnerable page is visited via a crafted URL. The issue requires low privileges and user interacti...

CVE-2023-48550

CVE-2023-48550 affects Adobe Experience Manager (AEM) 6.5.18 and earlier, with a stored XSS vulnerability that allows a low-privilege attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when accessing pages containing the vulner...

CVE-2023-48581

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Root cause: inadequate input handling allowing attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the vuln...

CVE-2023-48575

CVE-2023-48575 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The vulnerability is a stored XSS in vulnerable form fields that can be exploited by a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser when visiting a page containing the vulnerable ...

CVE-2023-48581 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48575 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48624

Adobe Experience Manager 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts that are executed in a victim’s browser when visiting the page containing the vulnerable field. CVSS v3.1...

CVE-2023-48624 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48488

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS (CVE-2023-48488). A low-privilege attacker can entice a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser context. Root cause not explicitl...

CVE-2023-48488 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48532

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability (CVE-2023-48532). The issue allows a low-privileged attacker to cause malicious JavaScript to run in a victim’s browser when the victim visits a URL referencing a vulnerable page. The core imp...

CVE-2023-48532 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...