Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a form that causes the execution of the malicious script.
History

Mon, 07 Oct 2024 14:00:00 +0000

Type Values Removed Values Added
Title DOM XSS in `/libs/dam/gui/coral/components/admin/welcome/clientlibs/welcome/js/welcome.js` Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-06-13T07:53:39.517Z

Updated: 2024-10-07T13:46:46.787Z

Reserved: 2024-05-21T17:07:35.272Z

Link: CVE-2024-36230

cve-icon Vulnrichment

Updated: 2024-08-02T03:30:13.172Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-13T08:16:21.360

Modified: 2024-06-17T20:10:31.787

Link: CVE-2024-36230

cve-icon Redhat

No data.