CVE-2023-48498

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability. The issue can be triggered when a low‑privileged attacker lures a victim to a URL referencing a vulnerable page, leading to execution of malicious JavaScript in the vic...

CVE-2023-48510

CVE-2023-48510 is a DOM-based XSS vulnerability in Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue enables a low-privileged attacker to cause a victim’s browser to execute malicious JavaScript when the victim visits a URL referencing a vulnerable page. The NVD entry (CVSSv3....

CVE-2023-48535

CVE-2023-48535 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw that allows a low-privileged attacker to persuade a victim to visit a URL referencing a vulnerable page, potentially causing malicious JavaScript to execute i...

CVE-2023-48542

CVE-2023-48542 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The flaw is a stored Cross-Site Scripting (XSS) in vulnerable form fields, exploitable by a low-privileged attacker who can inject malicious scripts that execute in a victim’s browser when visiting the page contain...

CVE-2023-48470

Summary: CVE-2023-48470 affects Adobe Experience Manager (AEM) 6.5.18 and earlier with a DOM-based XSS vulnerability. A low-privileged attacker can lure a victim to a crafted URL (user interaction) and execute malicious JavaScript in the victim’s browser. Affected product/version: AEM 6.5.18 and ...

CVE-2023-48483

CVE-2023-48483 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is described as a DOM-based XSS vulnerability where a low-privileged attacker could lure a victim to a crafted URL, causing malicious JavaScript to execute in the victim’s browser. The vulnerability conte...

CVE-2023-48494

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a DOM-based XSS vulnerability (CVE-2023-48494). An attacker with low privileges can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected product/version...

CVE-2023-48499

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can lure a user to a vulnerable URL, causing malicious JavaScript to execute in the victim’s browser. AEM APSB23-72 confirms fixes in the 6.5.19.0+ rele...

CVE-2023-48500

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker can lure a victim to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Public details across ...

CVE-2023-48545

CVE-2023-48545 affects Adobe Experience Manager 6.5.18 and earlier, with a stored XSS vulnerability in vulnerable form fields. Low-privilege attackers could inject malicious JavaScript that runs in a victim’s browser. Remediation: update to 6.5.19.0 or newer (per APSB23-72 and related advisories)...

CVE-2023-48553

CVE-2023-48553 affects Adobe Experience Manager 6.5.18 and earlier. It is a stored XSS in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript executed in a victim’s browser when visiting the vulnerable page. The issue is addressed by the APSB23-72 update; remedi...

CVE-2023-48554

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Low-privilege attackers could inject malicious scripts, with JavaScript executing when a victim visits the page containing the field. Public technical de...

CVE-2023-48458

Adobe Experience Manager 6.5.18 and earlier are affected by a DOM-based Cross-site Scripting (XSS) vulnerability. If a low-privilege attacker can lure a victim to a URL referencing a vulnerable page, malicious JavaScript may execute in the victim’s browser context. Affected product: Adobe Experie...

CVE-2023-48537

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which execute in a victim’s browser when visiting a page containing the vulnerable field. The CV...

CVE-2023-48476

Adobe Experience Manager (AEM) versions

CVE-2023-48489

Adobe Experience Manager 6.5.18 and earlier are affected by a DOM-based XSS vulnerability (CVE-2023-48489). A low-privileged attacker can lure a victim to visit a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Impact is limited to clien...

CVE-2023-48511

CVE-2023-48511 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page....

CVE-2023-48534

Adobe Experience Manager (AEM) 6.5.18 and earlier versions are affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which may execute in a victim’s browser when visiting the page containing the vulnerable field. The CVE entry lis...

CVE-2023-48501

CVE-2023-48501 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker, with user interaction, to inject malicious scripts that execute in a victim’s browser when visiting ...

CVE-2023-48520

The CVE-2023-48520 issue affects Adobe Experience Manager (AEM) 6.5.x prior to 6.5.19.0 (specifically 6.5.18 and earlier). It is a stored XSS vulnerability in vulnerable form fields that allows a low-privilege attacker to inject malicious scripts, executed in a victim’s browser when visiting a pa...

CVE-2023-48532

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability (CVE-2023-48532). The issue allows a low-privileged attacker to cause malicious JavaScript to run in a victim’s browser when the victim visits a URL referencing a vulnerable page. The core imp...

CVE-2023-48460

CVE-2023-48460 concerns Adobe Experience Manager (AEM) 6.5.18 and earlier. The reported issue is a DOM-based Cross‑Site Scripting (XSS) vulnerability where a low‑privileged attacker can lure a user to a vulnerable page URL, causing malicious JavaScript to run in the victim’s browser. The CVSS det...