CVE-2024-26117

CVE-2024-26117 affects Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The vulnerability is a reflected Cross-Site Scripting (XSS) that allows an attacker to induce a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser....

CVE-2024-26117 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

CVE-2024-36182 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-26054

CVE-2024-26054 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability that lets an attacker inject malicious scripts into vulnerable form fields, causing malicious JavaScript to run in a victim’s browser when visiting a page containing th...

CVE-2024-36152

Affected software : Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue : stored Cross‑Site Scripting (XSS) in vulnerable form fields allowing injection of malicious JavaScript. Impact : could cause the attacker’s script to run in a user’s browser when loading pages containing the vulnerable...

CVE-2024-26113 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

CVE-2024-26113

Adobe Experience Manager 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2024-26113). An attacker must entice a user to visit a vulnerable URL; this could allow malicious JavaScript to run in the victim’s browser context. Updates referenced in APSB24-2...

CVE-2024-36176 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36167

CVE-2024-36167 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS (CWE-79) in vulnerable form fields. Malicious JavaScript could run in a victim’s browser when loading the affected page. The CVSSv3.1 base score is 5.4 (Medium) with user interaction required for exploitati...

CVE-2024-36219 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36219

CVE-2024-36219 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious scripts, which may execute in a user’s browser when loading the ...

CVE-2024-36219 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36203 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36191 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-26068 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-26068 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36155

CVE-2024-36155 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser. The NVD entry reports a MEDIUM severity (CVSS 3.1: 5.4...

CVE-2024-36185 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

CVE-2024-36210 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

CVE-2024-36210

CVE-2024-36210 affects Adobe Experience Manager 6.5.20 and earlier and is a reflected XSS vulnerability caused by insufficient validation of input. Successful exploitation can cause malicious JavaScript to run in a victim’s browser when they visit a crafted URL referencing a vulnerable page. Publ...