CVE-2022-30683

CVE-2022-30683 affects Adobe Experience Manager 6.5.13.0 and earlier. It is a Violation of Secure Design Principles that could bypass the backend encryption feature and allow decryption of secrets. Exploitation requires low privileges and the attacker to already possess those secrets; the attack ...

CVE-2022-30681

CVE-2022-30681 affects Adobe Experience Manager (AEM) 6.5.13.0 and earlier, with a reflected Cross-Site Scripting (XSS) vulnerability. The issue allows an attacker to cause malicious JavaScript to run in a victim’s browser when the user visits a crafted URL referencing a vulnerable page. Exploita...

CVE-2022-30677

Adobe Experience Manager (AEM) 6.5.13.0 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue allows an attacker who can persuade a user to visit a crafted URL referencing a vulnerable page to have malicious JavaScript executed in the user’s browser; exploitat...

CVE-2022-34218

CVE-2022-34218 affects Adobe Experience Manager 6.5.13.0 and earlier with a reflected XSS vulnerability. An attacker can lure a victim to a crafted URL, causing malicious JavaScript to run in the victim’s browser (low privileges required). The CVSSv3.1 base score is 5.4 (MEDIUM). Remediation per ...

CVE-2022-30680

Adobe Experience Manager (AEM) 6.5.13.0 and earlier is affected by a reflected XSS vulnerability (CVE-2022-30680). The issue allows executing malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page; exploitation requires low-privilege access. The ...

CVE-2022-30682

Adobe Experience Manager (AEM) 6.5.x is affected by CVE-2022-30682, a reflected XSS in which an attacker can lure a user to a crafted URL to execute malicious JavaScript in the victim’s browser. The issue affects 6.5.13.0 and earlier; exploitation requires low-privilege access and user interactio...

CVE-2023-48613

CVE-2023-48613 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could be abused by a low-privileged attacker to inject malicious scripts, with malicious JavaScript potentially executing in a ...

CVE-2022-30686

CVE-2022-30686 affects Adobe Experience Manager 6.5.13.0 and earlier with a reflected XSS vulnerability. An attacker must lure a user to visit a crafted URL, causing malicious JavaScript to execute in the victim’s browser context. The CVSS vector indicates network access with low attack complexit...

CVE-2022-30678

Adobe Experience Manager (AEM) 6.5.13.0 and earlier is affected by a reflected XSS vulnerability. An attacker who can lure a user to a crafted URL referencing a vulnerable page can execute malicious JavaScript in the victim’s browser. Exploitation requires low attacker privileges and user interac...

CVE-2023-48594

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts, which may be executed in a victim’s browser when visiting pages containing the vuln...

CVE-2023-48615

CVE-2023-48615 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The vulnerability is a stored XSS in vulnerable form fields that low-privilege attackers can abuse to execute malicious JavaScript in the victim’s browser when visiting the affected page. The issue is confirmed in multiple ...

CVE-2023-48624

Adobe Experience Manager 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts that are executed in a victim’s browser when visiting the page containing the vulnerable field. CVSS v3.1...

CVE-2022-30685

CVE-2022-30685 affects Adobe Experience Manager 6.5.13.0 and earlier, with a reflected XSS vulnerability that allows malicious JavaScript to run in a victim’s browser when a user visits a crafted URL. Exploitation requires low privileges and some user interaction. Connected sources indicate this ...

CVE-2022-35664

CVE-2022-35664 is a reflected XSS in Adobe Experience Manager (AEM) versions 6.5.13.0 and earlier. The vulnerability arises from insufficient input handling on vulnerable pages, allowing a remote attacker to lure a user to a crafted URL and trigger malicious JavaScript executed in the victim’s br...

CVE-2023-48440

Summary: CVE-2023-48440 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when visiting the af...

CVE-2023-48581

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Root cause: inadequate input handling allowing attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the vuln...

CVE-2022-30684

Adobe Experience Manager 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker must entice a victim to visit a crafted URL, after which malicious JavaScript can run in the victim’s browser; exploitation requires low privileges. Supported analysis ...

CVE-2023-48618

CVE-2023-48618 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a DOM-based XSS vulnerability where a low-privilege attacker can entice a victim to visit a crafted URL, potentially executing malicious JavaScript in the victim’s browser. CVSS indicates network access with low attac...

CVE-2023-48619

CVE-2023-48619 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a stored XSS in vulnerable form fields that an attacker with low privileges can exploit to inject malicious JavaScript, which may execute in a victim’s browser when visiting the affected page. ...

CVE-2023-48607

CVE-2023-48607 is an Adobe Experience Manager (AEM) reflected XSS affecting 6.5.18 and earlier, allowing a low-privileged attacker to lure a victim to a crafted URL and execute JavaScript in the browser. Affected component is the AEM web UI/page rendering logic referenced by the CVE entry; root c...

CVE-2023-48614

Adobe Experience Manager 6.5.18 and earlier is affected by a DOM-based XSS vulnerability. If a low-privileged attacker lures a user to a URL referencing a vulnerable page, malicious JavaScript can execute in the victim’s browser. The issue is confirmed in multiple sources noting AEM’s REST/UI sur...

CVE-2023-48589

CVE-2023-48589 is a DOM-based Cross-site Scripting vulnerability in Adobe Experience Manager (AEM) versions 6.5.18 and earlier . The issue allows a low-privileged attacker to lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. The...

CVE-2023-48593

CVE-2023-48593 affects Adobe Experience Manager (AEM) prior to 6.5.19.0. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields that can be exploited by a low-privileged attacker to inject malicious scripts, resulting in JavaScript execution in a victim’s browser when ...

CVE-2023-48606

CVE-2023-48606 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. It is a DOM-based XSS vulnerability where a low-privileged attacker can lure a user to a crafted URL referencing a vulnerable page, allowing injected JavaScript to run in the victim’s browser. Documented impact is execution...

CVE-2023-48608

CVE-2023-48608 affects Adobe Experience Manager (AEM) up to version 6.5.18. The issue is an Improper Input Validation vulnerability that could permit a low-privilege attacker to cause a low-integrity impact within the app, with exploitation requiring user interaction. Publicly documented impact i...

CVE-2023-48609

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based Cross-site Scripting (XSS) vulnerability. When a low-privileged attacker entices a user to visit a URL referencing a vulnerable page, malicious JavaScript can execute in the victim’s browser, with the potential...

CVE-2023-48599

Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue could allow a low-privileged attacker to lure a victim to a crafted URL and have malicious JavaScript execute in the victim’s browser, with impact limited to confid...

CVE-2023-48601

Adobe Experience Manager (AEM) prior to 6.5.19.0 is affected by a reflected Cross-Site Scripting (XSS) vulnerability in which a low-privileged attacker can lure a victim to a crafted URL, resulting in malicious JavaScript execution in the victim’s browser. The CVE-2023-48601 issue affects AEM ver...

CVE-2023-48579

CVE-2023-48579 affects Adobe Experience Manager 6.5.18 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when visiting the affected page. The CVE is documented with a CVSS v3.1 base score of 5.4 (...

CVE-2023-48592

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker with user interaction could inject malicious scripts, which execute in a victim’s browser when visiting the affected page. Remediation is available: update t...

CVE-2023-48595

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which execute in a victim’s browser when visiting the page containing the vulnerable field. Root...

CVE-2023-48621

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privilege attacker entices a user to visit a crafted URL, malicious JavaScript can execute in the victim’s browser. Exploitation details indicate a network-bas...

CVE-2023-48587

CVE-2023-48587 affects Adobe Experience Manager (AEM) versions up to 6.5.18, where a DOM-based XSS vulnerability can execute malicious JavaScript in a victim’s browser when a user visits a crafted URL referencing a vulnerable page. The issue is described across multiple sources as a Cross-site Sc...

CVE-2023-48591

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based XSS vulnerability (CVE-2023-48591) that allows a low-privileged attacker to lure a victim to a crafted URL and have malicious JavaScript run in the victim’s browser. The CVE is documented with a CVSS v3.1 base score of 5...

CVE-2023-48604

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts that execute in a victim’s browser when visiting a page containing the vulnerable field. The issue i...

CVE-2023-48620

CVE-2023-48620 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) condition that a low-privileged attacker can exploit by injecting malicious scripts into vulnerable form fields, causing the victim’s browser to execute Java...

CVE-2023-48442

Adobe Experience Manager CVE-2023-48442 describes a stored XSS in AEM 6.5.18 and earlier where low-privilege attackers can inject malicious scripts into vulnerable form fields and have them executed in a victim’s browser when visiting the affected page. The vulnerability is confirmed in connected...

CVE-2023-48585

CVE-2023-48585: AEM 6.5.18 and earlier are affected by a stored XSS in vulnerable form fields. A low-privilege attacker could inject scripts, with malicious JavaScript executing in a victim’s browser when visiting the affected page. Remediation guidance in provided sources points to updates (APSB...

CVE-2023-48596

CVE-2023-48596 concerns Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The exposed issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with malicious JavaScript executed when a us...

CVE-2023-48577

CVE-2023-48577 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the a...

CVE-2023-48597

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the page containing the v...

CVE-2023-48605

Affected product: Adobe Experience Manager (AEM) 6.5.x is vulnerable in versions 6.5.18 and earlier. Root cause: DOM-based XSS flaw allows a low-privileged attacker to lure a victim to a vulnerable page URL, enabling execution of malicious JavaScript in the victim’s browser. Impact: An attacker c...

CVE-2023-48611

Adobe Experience Manager versions 6.5.18 and earlier are affected by a DOM-based XSS vulnerability (CVE-2023-48611). If a low-privileged attacker can entice a user to visit a vulnerable page URL, malicious JavaScript may execute in the victim’s browser. The issue is triggered by processing untrus...

CVE-2023-48582

CVE-2023-48582 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier, with a stored XSS in vulnerable form fields that could allow a low-privilege attacker to inject malicious JavaScript executed in a victim’s browser when visiting the page containing the field. The issue is document...

CVE-2023-48590

Adobe Experience Manager (AEM)

CVE-2023-48600

Adobe Experience Manager versions 6.5.18 and earlier contain a stored XSS (CWE-79) in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which execute in a victim’s browser when visiting the affected page. CVSSv3.1: 5.4 (Medium) with network attack vector, low complexi...

CVE-2023-48603

CVE-2023-48603 affects Adobe Experience Manager 6.5.18 and earlier. It is a stored XSS vulnerability in vulnerable form fields that could be exploited by a low-privileged attacker to inject malicious scripts, with malicious JavaScript executing in a victim’s browser when visiting the page contain...

CVE-2023-48576

CVE-2023-48576 affects Adobe Experience Manager

CVE-2023-48586

Adobe Experience Manager 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts executed in a victim’s browser upon visiting the page containing the vulnerable field. Root cause relat...

CVE-2023-48598

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The root cause is a stored XSS condition that could allow a low-privileged attacker to inject malicious scripts, with JavaScript potentially exec...