Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
History

Mon, 07 Oct 2024 14:30:00 +0000

Type Values Removed Values Added
Title AMS XSS - /libs/cq/searchpromote/components/colors/facetcontent.jsp (retest 1727950) Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-03-18T17:54:34.428Z

Updated: 2024-10-07T14:18:56.098Z

Reserved: 2024-02-14T17:37:23.402Z

Link: CVE-2024-26101

cve-icon Vulnrichment

Updated: 2024-08-01T23:59:32.208Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-03-18T18:15:17.123

Modified: 2024-11-21T09:01:56.547

Link: CVE-2024-26101

cve-icon Redhat

No data.