CVE-2024-21661

CVE-2024-21661 affects Argo CD. A DoS can be triggered by unsafe concurrent modification of an array in a multi‑threaded environment, with authentication not required. The issue causes crashes when two threads access the same array, rendering the service unavailable for all users. Affected releas...

CVE-2024-26065

Adobe Experience Manager (AEM) 6.5.19 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling injected JavaScript to run in a user’s browser when visiting the page with the field. Connected sources confirm the issue affects AEM versions up ...

CVE-2024-26106

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue is triggered when a user is enticed to visit a URL referencing a vulnerable page, allowing malicious JavaScript to execute in the victim’s browser context. Pr...

CVE-2024-26080

Adobe Experience Manager

CVE-2024-26035

Adobe Experience Manager (AEM) 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields (CWE-79). The issue allows an attacker to inject malicous scripts, which may execute in a victim’s browser when visiting the affected page; exploitation requires user interaction...

CVE-2024-26033

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The root cause is a stored XSS condition that could allow an attacker to inject malicious JavaScript, which may execute in a user’s browser when ...

CVE-2024-26064

Adobe Experience Manager is affected in versions 6.5.19 and earlier by a DOM‑based XSS vulnerability (CVE-2024-26064). The issue allows an attacker to inject malicious scripts that execute in the victim’s browser when they visit a page containing the vulnerable script, potentially leading to arbi...

CVE-2024-20760

CVE-2024-20760 affects Adobe Experience Manager (AEM) versions 6.5.19 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that may execute in a victim’s browser when visiting a page containing t...

CVE-2024-26120

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Root cause: inadequate input handling allows attacker-supplied script to be stored and later executed in a victim’s browser when visiting the page. Impact: cross-site s...

CVE-2024-26069

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields that can inject malicious JavaScript executed in a victim’s browser. Contributing details from connected sources confirm the issue is a stored XSS (CWE-79) and that expl...

CVE-2024-26061

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2024-26061). An attacker could inject malicious JavaScript, which may be executed in a victim’s browser when visiting the page containing the...

CVE-2024-26103

Adobe Experience Manager (AEM) 6.5.19 and earlier is affected by a reflected Cross‑Site Scripting (XSS) vulnerability (CVE-2024-26103) that can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page. The CVSS 3.1 base score is 5.4 (Medium...

CVE-2024-26051

Summary (CVE-2024-26051, Adobe Experience Manager) AEM versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) that lets an attacker inject malicious scripts into vulnerable form fields. Malicious JavaScript can be executed in a victim’s browser when...

CVE-2024-26101

Adobe Experience Manager (AEM) 6.5.19 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability. Attack requires convincing a victim to visit a URL referencing a vulnerable page, allowing malicious JavaScript to execute in the victim’s browser. CVSSv3.1 base score 5.4 (MEDIU...

CVE-2024-26096

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject malicious scripts into vulnerable form fields, potentially executing JavaScript in a victim’s browser when visiting the page containing th...

CVE-2024-26056

Adobe Experience Manager (AEM)

CVE-2024-26124

Adobe Experience Manager (AEM) prior to 6.5.20.0 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVSS 3.1 base score 5.4). The issue allows an attacker to inject malicious JavaScript into pages containing those fields, which could execute in a victim’s ...

CVE-2024-26031

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability that allows injection of malicious scripts into vulnerable form fields. Malicious JavaScript could execute in a user’s browser when they visit a page containing the vulnerable field. Remediation ...

CVE-2024-26059

CVE-2024-26059 affects Adobe Experience Manager 6.5.19 and earlier with a stored XSS vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript and have it execute in a victim’s browser when visiting the page containing the field; exploitation requires some user intera...

CVE-2024-26073

CVE-2024-26073 affects Adobe Experience Manager (AEM) 6.5.19 and earlier, with a stored XSS vulnerability in vulnerable form fields that can inject malicious JavaScript executed in a victim’s browser when visiting the page containing the field. The exploitation requires user interaction and is ti...