CVE-2023-48549

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by CVE-2023-48549, a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privileged attacker who can inject malicious scripts, with JavaScript potentially executing i...

CVE-2023-48451

CVE-2023-48451 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a DOM-based XSS vulnerability that allows a low-privilege attacker to cause a victim’s browser to execute malicious JavaScript when the victim visits a crafted URL referencing a vulnerable page. The CV...

CVE-2023-48454

Adobe Experience Manager (AEM) version 6.5.18 and earlier is affected by a DOM‑based Cross‑Site Scripting (XSS) vulnerability. The issue can be triggered when a low‑privileged attacker persuades a victim to visit a URL referencing a vulnerable page, allowing malicious JavaScript to execute in the...

CVE-2023-48466

CVE-2023-48466 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a DOM-based Cross-site Scripting (XSS) vulnerability that could allow a low-privileged attacker to get a victim’s browser to execute malicious JavaScript when visiting a crafted URL referencing a vulnerable page. Impa...

CVE-2023-48468

CVE-2023-48468 affects Adobe Experience Manager 6.5.18 and earlier with a DOM-based XSS vulnerability. A low-privilege attacker can lure a user to a vulnerable page URL, allowing malicious JavaScript to execute in the victim’s browser. CVSSv3.1 base score 5.4 (MEDIUM); attack vector NETWORK, priv...

CVE-2023-48492

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48492). The issue allows a low-privileged attacker to lure a victim to a crafted URL referencing a vulnerable page, triggering malicious JavaScript execution in the victim’s browser. The CVE de...

CVE-2023-48515

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability (CVE-2023-48515) in vulnerable form fields. A low-privilege attacker could inject malicious scripts, which execute in the victim’s browser when visiting the affected page. The issue is discussed in Adobe’s APSB...

CVE-2023-48525

CVE-2023-48525 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a DOM-based XSS vulnerability where a low-privilege attacker may entice a victim to visit a vulnerable page URL, enabling malicious JavaScript to execute in the victim’s browser. Impact is client-side;...

CVE-2023-48529

CVE-2023-48529 affects Adobe Experience Manager (AEM) 6.5.18 and earlier, with a stored XSS vulnerability in vulnerable form fields that could allow a low-privilege attacker to inject malicious JavaScript executed in a victim’s browser. The CVE is documented across multiple sources; exploitation ...

CVE-2023-48533

CVE-2023-48533 affects Adobe Experience Manager 6.5.18 and earlier. It is a stored XSS in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that executes when a user visits a page containing the field. The issue is documented across multiple sources (NVD/Nessus refer...

CVE-2023-48546

CVE-2023-48546 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a stored XSS in vulnerable form fields that could be exploited by a low-privileged attacker, requiring user interaction, to inject and execute malicious JavaScript in a victim’s browser. The CVSS analysis indic...

CVE-2023-48452

Affected software: Adobe Experience Manager (AEM) 6.5.18 and earlier. Vulnerability: DOM-based Cross-site Scripting (XSS) that can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page. Impact/ characteristics: Low confidentiality and in...

CVE-2023-48456

Summary of CVE-2023-48456 : Adobe Experience Manager (AEM)

CVE-2023-48462

CVE-2023-48462 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a DOM-based XSS vulnerability where a low-privileged attacker can lure a user to a crafted URL, causing malicious JavaScript to execute in the victim’s browser. Impact is limited to client-side confidentiality/integri...

CVE-2023-48467

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability that can execute malicious JavaScript in the victim’s browser when a user visits a crafted URL referencing a vulnerable page. The CVE is documented with a Medium severity (CVSS 3.1: 5.4) and r...

CVE-2023-48484

CVE-2023-48484 concerns Adobe Experience Manager (AEM) versions 6.5.18 and earlier, affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue allows a low-privileged attacker who convinces a victim to visit a crafted URL referencing a vulnerable page to execute arbitrary JavaScr...

CVE-2023-48495

CVE-2023-48495 affects Adobe Experience Manager 6.5.18 and earlier with a DOM-based XSS vulnerability. A low-priv attacker can trick a user into visiting a vulnerable page URL, allowing injected JavaScript to run in the victim’s browser. A patch exists in later AEM releases (upgrade to 6.5.19.0 o...

CVE-2023-48509

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based XSS in which a low-privileged attacker can lure a user to a crafted URL, causing arbitrary JavaScript to run in the victim’s browser. Impact is described as cross-site scripting with potential exposure of data and user ...

CVE-2023-48543

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker could inject malicious scripts, with JavaScript potentially executing in a victim’s browser when visiting pages containing the vu...

CVE-2023-48447

Adobe Experience Manager 6.5.18 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability that can execute malicious JavaScript in a victim’s browser when a user is tricked into visiting a vulnerable URL. The issue is user-interaction-requiring, with low privileges and netwo...

CVE-2023-48453

CVE-2023-48453 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The flaw is a DOM-based Cross‑Site Scripting (XSS) vulnerability that allows a low‑privileged attacker to lure a victim to a URL referencing a vulnerable page, resulting in execution of malicious JavaScript in the victim’s ...

CVE-2023-48463

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based XSS vulnerability. The issue allows a low-privileged attacker to entice a victim to visit a vulnerable page URL, causing injected JavaScript to execute in the victim’s browser. Affected component/entry: AEM web pages ren...

CVE-2023-48508

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2023-48508). A low-privilege attacker could inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing in a victim’s browser...

CVE-2023-48512

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2023-48512). The issue enables a low-privileged attacker to inject malicious scripts, which could execute in a victim’s browser when visiting the aff...

CVE-2023-48522

CVE-2023-48522 (Adobe Experience Manager) : A stored Cross-Site Scripting (XSS) vulnerability affects AEM versions 6.5.18 and earlier. An attacker with low privileges can inject JavaScript into vulnerable form fields, which would execute in a victim’s browser when visiting the affected page. Root...

CVE-2023-48555

CVE-2023-48555 affects Adobe Experience Manager 6.5.18 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability where a low-privileged attacker can inject malicious scripts into vulnerable form fields; the scripts may execute in a victim’s browser when visiting the affected page. CVSS...

CVE-2023-48446

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The flaw allows a low-privileged attacker to entice a victim to visit a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser...

CVE-2023-48473

Summary for CVE-2023-48473 (Adobe Experience Manager) : AEM 6.5.18 and earlier are affected by a DOM-based XSS vulnerability that can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page. The exposed impact is described as low confident...

CVE-2023-48505

CVE-2023-48505 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page conta...

CVE-2023-48506

Adobe Experience Manager (AEM) versiones 6.5.18 y anteriores son afectadas por una vulnerabilidad de Cross-Site Scripting (XSS) almacenada en campos de formulario vulnerables. Un atacante con privilegios bajos podría inyectar scripts maliciosos y ejecutar JavaScript en el navegador de la víctima ...

CVE-2023-48518

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which execute in victims’ browsers when visiting pages containing the vulnerable field. The issu...

CVE-2023-48524

CVE-2023-48524 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a stored XSS in vulnerable form fields that could allow a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser after visiting a page with the vulnerable field. CVSS v3.1 metrics ind...

CVE-2023-48530

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored XSS vulnerability in form fields (CVE-2023-48530). The CVE is rated CVSS v3.1 base score 5.4 (Medium) with low privileges required and user interaction. Affected product: AEM 6.5.x (6.5.18 and earlier). Underlying issue: s...

CVE-2023-48538

CVE-2023-48538 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a stored XSS in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with JavaScript executing in a victim’s browser when visiting the affected page. According to the C...

CVE-2023-48556

CVE-2023-48556 affects Adobe Experience Manager 6.5.18 and earlier. A DOM-based XSS could be triggered when a user is induced to visit a vulnerable page URL, allowing malicious JavaScript to execute in the victim’s browser. The advisory and related sources indicate remediation via updates to a fi...

CVE-2023-48464

Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability. A low-privileged attacker can lure a user to a vulnerable page URL, causing malicious JavaScript to execute in the victim’s browser. CVSSv3.1 base score 5.4 (Medium) with network access and user in...

CVE-2023-48475

Adobe Experience Manager 6.5.18 and earlier are affected by a DOM-based XSS vulnerability that allows a low-privilege attacker to trigger execution of malicious JavaScript in a victim’s browser when visiting a vulnerable URL. This is documented as CVE-2023-48475. The issue’s impact is limited to ...

CVE-2023-48478

CVE-2023-48478 affects Adobe Experience Manager up to version 6.5.18. It is a DOM-based XSS: a low-privileged attacker can entice a victim to visit a crafted URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. The CVSSv3.1 vector (AV:N/AC:L/PR:L/UI:R/S:...

CVE-2023-48480

CVE-2023-48480 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a DOM-based XSS vulnerability in vulnerable pages that enables a low-privileged attacker to cause malicious JavaScript to run in a victim’s browser when the victim visits a crafted URL referencing the vulnerable page....

CVE-2023-48482

Adobe Experience Manager 6.5.18 and earlier is affected by a DOM-based XSS vulnerability. If a low-privileged attacker convinces a user to visit a URL referencing a vulnerable page, malicious JavaScript may execute in the victim’s browser. Remediation: upgrade to patched versions (AEM 6.5.19.0 or...

CVE-2023-48517

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when they load the affected page. The CVSS 3.1 metrics in...

CVE-2023-48528

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a DOM-based Cross-site Scripting (XSS) issue. A low-privilege attacker can lure a user to a vulnerable page URL, potentially executing malicious JavaScript in the user’s browser. The issue is documented as CVE-2023-48528. Remediati...

CVE-2023-48550

CVE-2023-48550 affects Adobe Experience Manager (AEM) 6.5.18 and earlier, with a stored XSS vulnerability that allows a low-privilege attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when accessing pages containing the vulner...

CVE-2023-48551

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored XSS vulnerability in vulnerable form fields (CVE-2023-48551). A low-privileged attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerable field. The issue i...

CVE-2023-48455

Adobe Experience Manager (AEM) 6.5.x versions up to 6.5.18.0 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. Exploitation requires a user to visit a crafted URL, allowing malicious JavaScript to run in the victim’s browser. Remediation per APSB23-72 is to apply the update to...

CVE-2023-48471

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by CVE-2023-48471, a DOM-based XSS. A low-privilege attacker can entice a victim to visit a crafted URL, causing malicious JavaScript to run in the victim’s browser. Impact per the CVSS: low confidentiality and integrity, no availabil...

CVE-2023-48472

Summary : CVE-2023-48472 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a DOM-based Cross-site Scripting (XSS) vulnerability where a low-privileged attacker can lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s brows...

CVE-2023-48479

Adobe Experience Manager 6.5.18 and earlier is affected by a DOM-based XSS vulnerability (CVE-2023-48479) that can execute malicious JavaScript in a victim’s browser when they visit a crafted URL. Exploitation requires low privileges and user interaction. Remediation: upgrade to AEM 6.5.19.0 or l...

CVE-2023-48481

Adobe Experience Manager (AEM)

CVE-2023-48485

CVE-2023-48485 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a DOM-based Cross-site Scripting (XSS) flaw where, if a low-privileged user visits a crafted URL referencing a vulnerable page, malicious JavaScript can execute in the victim’s browser. Reporte...