Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
History

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Adobe adobe Experience Manager
CPEs cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Vendors & Products Adobe adobe Experience Manager
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 07 Oct 2024 12:30:00 +0000

Type Values Removed Values Added
Title AMS XSS - /libs/granite/backup/clientlibs/js/backup.js Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Mon, 09 Sep 2024 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe experience Manager
CPEs cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:*
cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:*
Vendors & Products Adobe
Adobe experience Manager

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-06-25T08:50:01.824Z

Updated: 2024-10-07T12:28:45.739Z

Reserved: 2024-04-30T19:50:50.914Z

Link: CVE-2024-34141

cve-icon Vulnrichment

Updated: 2024-08-02T02:43:00.456Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-25T09:15:56.807

Modified: 2024-09-09T14:01:25.947

Link: CVE-2024-34141

cve-icon Redhat

No data.