Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
History

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Adobe adobe Experience Manager
CPEs cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Vendors & Products Adobe adobe Experience Manager
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 07 Oct 2024 13:30:00 +0000

Type Values Removed Values Added
Title AMS XSS - /libs/dam/cfm/components/download/clientlib/js/download.js Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Mon, 09 Sep 2024 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe experience Manager
CPEs cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:*
cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:*
Vendors & Products Adobe
Adobe experience Manager

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-06-25T08:50:02.677Z

Updated: 2024-10-07T13:06:39.123Z

Reserved: 2024-04-30T19:50:50.914Z

Link: CVE-2024-34142

cve-icon Vulnrichment

Updated: 2024-08-02T02:43:00.131Z

cve-icon NVD

Status : Modified

Published: 2024-06-25T09:15:57.130

Modified: 2024-11-21T09:18:11.097

Link: CVE-2024-34142

cve-icon Redhat

No data.