Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe adobe Experience Manager
|
|
CPEs | cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:* | |
Vendors & Products |
Adobe adobe Experience Manager
|
|
Metrics |
ssvc
|
Mon, 07 Oct 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | AMS XSS - /libs/dam/cfm/components/download/clientlib/js/download.js | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
Mon, 09 Sep 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe experience Manager |
|
CPEs | cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:* cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* |
|
Vendors & Products |
Adobe
Adobe experience Manager |
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-06-25T08:50:02.677Z
Updated: 2024-10-07T13:06:39.123Z
Reserved: 2024-04-30T19:50:50.914Z
Link: CVE-2024-34142
Vulnrichment
Updated: 2024-08-02T02:43:00.131Z
NVD
Status : Analyzed
Published: 2024-06-25T09:15:57.130
Modified: 2024-09-09T14:01:51.820
Link: CVE-2024-34142
Redhat
No data.