CVE-2023-48621

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privilege attacker entices a user to visit a crafted URL, malicious JavaScript can execute in the victim’s browser. Exploitation details indicate a network-bas...

CVE-2023-48576

CVE-2023-48576 affects Adobe Experience Manager

CVE-2023-47065

The CVE-2023-47065 entry concerns Adobe Experience Manager (AEM) 6.5.18 and earlier with a DOM-based XSS vulnerability. The vulnerability allows a low-privileged attacker to trick a victim into visiting a crafted URL, causing malicious JavaScript to run in the victim’s browser. Affected component...

CVE-2023-47065 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48453

CVE-2023-48453 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The flaw is a DOM-based Cross‑Site Scripting (XSS) vulnerability that allows a low‑privileged attacker to lure a victim to a URL referencing a vulnerable page, resulting in execution of malicious JavaScript in the victim’s ...

CVE-2023-48542

CVE-2023-48542 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The flaw is a stored Cross-Site Scripting (XSS) in vulnerable form fields, exploitable by a low-privileged attacker who can inject malicious scripts that execute in a victim’s browser when visiting the page contain...

CVE-2023-48453 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48542 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48608

CVE-2023-48608 affects Adobe Experience Manager (AEM) up to version 6.5.18. The issue is an Improper Input Validation vulnerability that could permit a low-privilege attacker to cause a low-integrity impact within the app, with exploitation requiring user interaction. Publicly documented impact i...

CVE-2023-48608 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Input Validation vulnerability. A low-privileged attacker could leverage this vulnerability to achieve a low-integrity impact within the application. Exploitation of this issue requires user interaction...

CVE-2023-48528 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48528

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based Cross-site Scripting (XSS) issue. A low-privilege attacker can lure a user to a vulnerable page URL, potentially executing malicious JavaScript in the user’s browser. The issue is documented as CVE-2023-48528. Remediati...

CVE-2023-48528 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48476

Adobe Experience Manager (AEM) versions

CVE-2023-48476 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48579

CVE-2023-48579 affects Adobe Experience Manager 6.5.18 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when visiting the affected page. The CVE is documented with a CVSS v3.1 base score of 5.4 (...

CVE-2023-48544 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48579 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48544 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48544

CVE-2023-48544 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that, when a low-privilege attacker injects malicious scripts, can cause JavaScript to run in a victim’s browser upon visiting the aff...