Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe adobe Experience Manager
|
|
CPEs | cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:* | |
Vendors & Products |
Adobe adobe Experience Manager
|
|
Metrics |
ssvc
|
Mon, 07 Oct 2024 12:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | AMS XSS - /libs/granite/backup/clientlibs/js/backup.js | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
Mon, 09 Sep 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe experience Manager |
|
CPEs | cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:* cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* |
|
Vendors & Products |
Adobe
Adobe experience Manager |
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-06-25T08:50:01.824Z
Updated: 2024-10-07T12:28:45.739Z
Reserved: 2024-04-30T19:50:50.914Z
Link: CVE-2024-34141
Vulnrichment
Updated: 2024-08-02T02:43:00.456Z
NVD
Status : Analyzed
Published: 2024-06-25T09:15:56.807
Modified: 2024-09-09T14:01:25.947
Link: CVE-2024-34141
Redhat
No data.