CVE-2022-44488

Adobe Experience Manager (AEM) versions 6.5.14 and earlier are affected by CVE-2022-44488, an Open Redirect vulnerability where a low-privilege authenticated attacker can cause users to be redirected to a malicious site. Exploitation requires user interaction. Mitigation: upgrade to a fixed versi...

CVE-2022-42349

Summary: CVE-2022-42349 affects Adobe Experience Manager (AEM) 6.5.14 and earlier. The issue is a reflected Cross‑Site Scripting (XSS) vulnerability that can execute malicious JavaScript in a victim’s browser if the user visits a crafted URL referencing a vulnerable page. Impact details : attacke...

CVE-2022-42365

CVE-2022-42365 – AEM reflected XSS : Adobe Experience Manager 6.5.14 and earlier is vulnerable to a reflected Cross-Site Scripting attack. A low-privilege attacker can trick a user into visiting a URL referencing a vulnerable page, causing malicious JavaScript to execute in the user’s browser con...

CVE-2023-22259

The CVE-2023-22259 issue affects Adobe Experience Manager versions 6.5.15.0 and earlier, where an Open Redirect vulnerability allows a low-privilege authenticated user to redirect victims to malicious sites. The exploit requires user interaction, and the vulnerable component is the URL redirectio...

CVE-2022-35695

CVE-2022-35695 affects Adobe Experience Manager (AEM) versions 6.5.14 and earlier, with a reflected XSS vulnerability that can cause malicious JavaScript to execute in a victim’s browser when a user is lured to a crafted URL. Exploitation requires user interaction and low privileges. Affected com...

CVE-2023-22253

CVE-2023-22253 pertains to Adobe Experience Manager (AEM) 6.5.15.0 and earlier, with a reflected XSS vulnerability. A low-privilege attacker can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the user’s browser. The CVE is included in the AP...

CVE-2022-42354

CVE-2022-42354 describes a reflected XSS in Adobe Experience Manager (AEM) 6.5.14 and earlier: a low-privileged attacker can convince a victim to visit a crafted URL, causing arbitrary JavaScript to run in the victim’s browser. Connected sources confirm this is an AEM page-context XSS vulnerabili...

CVE-2022-44466

Adobe Experience Manager (AEM) 6.5.14 and earlier is affected by a reflected XSS vulnerability (CVE-2022-44466). Exploitation requires a low-privileged attacker to entice a victim to visit a crafted URL, allowing malicious JavaScript to run in the victim’s browser. Impact is limited to the affect...

CVE-2023-22258

Adobe Experience Manager (AEM) 6.5.x up to 6.5.15.0 is affected by a URL redirection to an untrusted site (open redirect) vulnerability. A low-privilege authenticated attacker can cause a user-to-malicious-site redirect, with exploitation requiring user interaction. The issue is addressed in Adob...

CVE-2023-48459

Adobe Experience Manager 6.5.18 and earlier are affected by a DOM-based XSS in which a low-privileged attacker can entice a victim to a vulnerable URL, causing malicious JavaScript to execute in the victim’s browser. The issue stems from inadequate protection of the page structure, enabling cross...

CVE-2023-48503

CVE-2023-48503 affects Adobe Experience Manager 6.5.18 and earlier with a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when they visit the page containing the field. CVSS v3.1 base score 5.4 (Medi...

CVE-2023-48474

CVE-2023-48474 affects Adobe Experience Manager 6.5.18 and earlier and is a DOM-based XSS vulnerability. A low-privileged attacker can lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The NVD entry confirms the issue with a CVS...

CVE-2023-48496

CVE-2023-48496: Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. An attacker with low privileges can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The issue is associa...

CVE-2023-48521

CVE-2023-48521 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The vulnerability is a stored XSS in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page. The CVE indicates a MEDIUM seve...

CVE-2023-48540

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2023-48540) in vulnerable form fields, enabling a low-privileged attacker to inject JavaScript that runs in a victim’s browser when visiting the page containing the field. Impa...

CVE-2023-48444

CVE-2023-48444 concerns Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a stored XSS in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with execution in the victim’s browser when visiting the affected page. The provided sour...

CVE-2023-48541

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based Cross-site Scripting (XSS) vulnerability. A low-privilege attacker can lure a victim to a URL referencing a vulnerable page, causing arbitrary JavaScript to execute in the victim’s browser. Documented impact per NVD: mal...

CVE-2023-48497

CVE-2023-48497 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a reflected Cross-Site Scripting (XSS) flaw: a low-privileged attacker can entice a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. The CVSS vector (AV...

CVE-2023-48457

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. A low-privileged attacker could entice a user to visit a vulnerable page URL, leading to execution of malicious JavaScript in the victim’s browser. Connected sources confirm the affected prod...

CVE-2023-48445

CVE-2023-48445 affects Adobe Experience Manager 6.5.18 and earlier via a DOM-based XSS flaw: if a user visits a crafted URL on a vulnerable page, malicious JavaScript can execute in the victim’s browser. Consequence is typically user‑context script execution with low confidentiality/integrity imp...

CVE-2023-48449

CVE-2023-48449 affects Adobe Experience Manager 6.5.18 and earlier. It is a DOM-based XSS vulnerability where a low-privileged attacker convincing a user to visit a vulnerable URL can execute malicious JavaScript in the victim’s browser. The NVD entry lists CVSSv3.1: 5.4 (Medium), network vector,...

CVE-2023-48519

CVE-2023-48519 affects Adobe Experience Manager 6.5.18 and earlier, with a stored XSS where a low-privileged attacker can inject malicious scripts into vulnerable form fields; victims browsing the page execute the injected JavaScript. The issue has a CVSS v3.1 base score of 5.4 (MEDIUM) with netw...

CVE-2023-48547

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts that execute in a victim’s browser when visiting the affected page. Remediation per connected sou...

CVE-2023-48448

CVE-2023-48448 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier, describing a reflected Cross-Site Scripting (XSS) vulnerability. The root cause is not explicitly detailed in the provided text beyond the nature of XSS, but the impact is that if a low-privileged attacker lures a ...

CVE-2023-48465

Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. If a low-privilege attacker convinces a victim to visit a URL referencing a vulnerable page, malicious JavaScript may run in the victim’s browser. Remediation: update to a version later than 6.5.18...

CVE-2023-48488

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS (CVE-2023-48488). A low-privilege attacker can entice a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser context. Root cause not explicitl...

CVE-2023-48490

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based cross-site scripting (XSS) vulnerability. The issue allows a low-privileged attacker to lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected comp...

CVE-2023-48493

Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability in which an attacker can induce a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected component is the web-page rendering l...

CVE-2023-48526

CVE-2023-48526 affects Adobe Experience Manager up to version 6.5.18: a reflected XSS can cause a victim’s browser to execute malicious JavaScript when visiting a crafted URL. Affected product: Adobe Experience Manager 6.5.18 and earlier. Root cause: reflected XSS. Impact: potential client-side s...

CVE-2023-48527

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing the field. The issue...

CVE-2023-48491

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. The issue could allow a low-privileged attacker to lure a victim to a vulnerable page URL, causing malicious JavaScript to execute in the victim’s browser. Affected component is the web-facing page re...

CVE-2023-48486

CVE-2023-48486 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a DOM-based XSS in vulnerable pages where a low-privileged attacker can lure a victim to a crafted URL, allowing execution of malicious JavaScript in the victim’s browser. Documented impact is user interaction ...

CVE-2023-48513

CVE-2023-48513 affects Adobe Experience Manager 6.5.18 and earlier. A stored XSS vulnerability in vulnerable form fields could allow a low-privileged attacker to inject malicious scripts executed in the victim’s browser upon visiting the page, with user interaction required (per CVSS: AV:N/AC:L/P...

CVE-2023-48514

CVE-2023-48514 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability that could allow a low-privileged attacker to inject malicious scripts into vulnerable form fields, causing malicious JavaScript to run in a victim’s browser ...

CVE-2023-48531

CVE-2023-48531 concerns Adobe Experience Manager (AEM) 6.5.18 and earlier, with a stored XSS in vulnerable form fields. The vulnerability could allow a low-privileged attacker to inject malicious scripts, which are executed in a victim’s browser when visiting a page containing the affected field....

CVE-2023-48539

Adobe Experience Manager 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. A low-privileged attacker can lure a user to a crafted URL, causing malicious JavaScript to execute in the user’s browser. Remediation: apply the APSB23-72 updates to 6.5.19.0+ (6.5.19.0). CVSSv3.1 base sco...

CVE-2023-48552

CVE-2023-48552 affects Adobe Experience Manager 6.5.18 and earlier with a stored XSS in vulnerable form fields. This can allow a low-privileged attacker to inject malicious scripts that execute in a victim’s browser, requiring user interaction to trigger. The documented impact is limited to clien...

CVE-2023-48450

CVE-2023-48450 concerns Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a DOM-based Cross‑Site Scripting (XSS) flaw in which an attacker can lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. Root cau...

CVE-2023-48469

CVE-2023-48469 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is described as a DOM-based Cross‑Site Scripting (XSS) vulnerability that can trigger execution of malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page. The CVE is con...

CVE-2023-48536

Adobe Experience Manager (AEM) version 6.5.18 and earlier is affected by a DOM-based XSS vulnerability. The issue allows a low-privileged attacker to lure a victim to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The root cause is DO...

CVE-2023-48548

CVE-2023-48548 : Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields; a low-priv attacker could inject JavaScript executed in a victim’s browser when loading the page. The Nessus advisory (APSB23-72) notes affected versions and that upd...

CVE-2023-48456

Summary of CVE-2023-48456 : Adobe Experience Manager (AEM)

CVE-2023-48477

CVE-2023-48477 affects Adobe Experience Manager (AEM) 6.5.18 and earlier with a DOM-based Cross-site Scripting vulnerability. Exploitation requires a user to visit a crafted URL, allowing attacker-controlled JavaScript to run in the victim’s browser. The issue’s details point to a DOM-XSS class, ...

CVE-2023-48487

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability in which a low-privileged attacker can lure a user to a crafted URL and cause malicious JavaScript to run in the victim’s browser. Affected component is the web page rendering c...

CVE-2023-48507

CVE-2023-48507 : Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. An attacker with low privileges can abuse the flaw to inject malicious scripts; victims execute JavaScript in their browser when visiting the affected page. ...

CVE-2023-48533

CVE-2023-48533 affects Adobe Experience Manager 6.5.18 and earlier. It is a stored XSS in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that executes when a user visits a page containing the field. The issue is documented across multiple sources (NVD/Nessus refer...

CVE-2023-48544

CVE-2023-48544 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that, when a low-privilege attacker injects malicious scripts, can cause JavaScript to run in a victim’s browser upon visiting the aff...

CVE-2023-48549

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by CVE-2023-48549, a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privileged attacker who can inject malicious scripts, with JavaScript potentially executing i...

CVE-2023-48454

Adobe Experience Manager (AEM) version 6.5.18 and earlier is affected by a DOM‑based Cross‑Site Scripting (XSS) vulnerability. The issue can be triggered when a low‑privileged attacker persuades a victim to visit a URL referencing a vulnerable page, allowing malicious JavaScript to execute in the...

CVE-2023-48461

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based XSS vulnerability (CVE-2023-48461). The issue allows a low-privileged attacker who lures a victim to a vulnerable URL to execute malicious JavaScript in the victim’s browser, within the context of the page. The vulnerab...