CVE-2024-26030

Adobe Experience Manager 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows attacker-injected JavaScript to run in a victim’s browser when visiting affected pages. Remediation is available via Adobe APSB24-05 security update; apply the APSB24...

CVE-2024-26102

CVE-2024-26102 affects Adobe Experience Manager (AEM) 6.5.19 and earlier and is a reflected XSS vulnerability. The issue permits executing malicious JavaScript in a victim’s browser if a crafted URL references a vulnerable page. The vulnerability is documented with a Medium severity (CVSS 3.1: 5....

CVE-2024-26044

CVE-2024-26044 affects Adobe Experience Manager (AEM) 6.5.19 and earlier with a DOM-based XSS vulnerability in the web page handling that could cause malicious JavaScript to execute in a victim’s browser, potentially enabling arbitrary code execution in the browser context. The issue is documente...

CVE-2024-26038

CVE-2024-26038 concerns Adobe Experience Manager (AEM) versions 6.5.19 and earlier. A stored Cross-Site Scripting (XSS) vulnerability exists in vulnerable form fields, allowing an attacker to inject and have malicious JavaScript executed in a victim’s browser when visiting a page containing the f...

CVE-2024-26067

Adobe Experience Manager (AEM) 6.5.19 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. The issue arises from inadequate protection of form inputs, allowing malicious JavaScript to execute in a victim’s browser when visiting a page containing the vulnerable field. E...

CVE-2024-26040

CVE-2024-26040 affects Adobe Experience Manager 6.5.19 and earlier with a stored XSS in vulnerable form fields. Exploitation requires user interaction; malicious JavaScript can run in the victim’s browser when loading a page containing the affected field. A related advisory (APSB24-05) and Nessus...

CVE-2024-26094

CVE-2024-26094 affects Adobe Experience Manager (AEM) 6.5.19 and earlier. The vulnerability is a stored XSS in vulnerable form fields that could allow an attacker to inject malicious JavaScript, executed in a victim’s browser when accessing a page containing the field. According to the CVE entry,...

CVE-2024-26042

CVE-2024-26042 affects Adobe Experience Manager (AEM) versions

CVE-2024-26028

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-26028). The issue occurs in vulnerable form fields where malicious JavaScript can be stored and executed when a user visits the page containing the field. CVE det...

CVE-2024-26032

Adobe Experience Manager (AEM)

CVE-2024-26105

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability, enabling malicious JavaScript to run in a victim’s browser when a user visits a crafted URL. The issue is described with a CVSS v3.1 base score of 5.4 (Medium) with net...

CVE-2024-26052

Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript that executes in a victim’s browser when loading the page containing the field. The CVE-2024-26052 entry ...

CVE-2024-26107

Adobe Experience Manager (AEM) 6.5.19 and earlier is affected by a reflected XSS vulnerability (CVE-2024-26107). The issue exists in vulnerable pages where crafted URLs can execute malicious JavaScript in the victim’s browser. Public references in the connected documents identify a remediation vi...

CVE-2024-26045

CVE-2024-26045 affects Adobe Experience Manager (AEM) 6.5.19 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that may run in a victim’s browser when the page with the vulnerable field is loa...

CVE-2024-20768

CVE-2024-20768 is a stored XSS in Adobe Experience Manager (AEM) 6.5.19 and earlier. The vulnerability allows injected JavaScript in vulnerable form fields, which executes in a victim’s browser when loading the page containing the field. Affected product/versions: AEM 6.5.19 and earlier. Root cau...

CVE-2024-26125

CVE-2024-26125 affects Adobe Experience Manager 6.5.19 and earlier, describing a stored XSS in vulnerable form fields that could execute malicious JavaScript in a victim’s browser. Connected sources corroborate an XSS family (stored and DOM-based variants) with multiple CVEs referenced in APSB24-...

CVE-2024-26041

CVE-2024-26041 concerns Adobe Experience Manager (AEM) before version 6.5.20, reporting a stored XSS vulnerability in vulnerable form fields. The underlying issue is stored cross-site scripting that allows injected JavaScript to run when users visit pages containing the affected fields. Public so...

CVE-2024-26043

CVE-2024-26043 concerns a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.19 and earlier. The issue allows an attacker to inject malicious scripts into vulnerable form fields, with JavaScript executed in a victim’s browser upon visiting the affected ...

CVE-2024-20762

Adobe Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires a user to open a malicious file. Remediation is provided in APSB24-19; update to Animate 24.0.1 or 23.0....

CVE-2024-20764

CVE-2024-20764 affects Adobe Animate versions 24.0, 23.0.3 and earlier, due to an out-of-bounds read that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Multiple sources corroborate the issue and its impact. Fixes...