EUVD-2018-16661

Malware in sbrugna...

Cross site scripting

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

CVE-2018-4876 affects Adobe Experience Manager 6.1–6.3. The vulnerability is a cross-site scripting flaw caused by a bypass of the Sling XSSAPI#getValidHref function, enabling an attacker to obtain sensitive information. Adobe’s advisory APSB18-04 confirms security updates addressing CVE-2018-487...

CVE-2018-4876: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

PT-2018-16585

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.1 through 6.3 Description The issue allows for cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function. Recommendations For Adobe Experience Manager versions 6.1 through 6.3, update to a...