Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.
Metrics
Affected Vendors & Products
References
History
Mon, 07 Oct 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:* | |
Metrics |
ssvc
|
Mon, 16 Sep 2024 13:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | HTML Injection in Editor status bar for pages from AEM launches | Adobe Experience Manager | Improper Input Validation (CWE-20) |
Metrics |
cvssV3_1
|
cvssV3_1
|
Thu, 12 Sep 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe experience Manager |
|
Weaknesses | NVD-CWE-noinfo | |
CPEs | cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:* cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* |
|
Vendors & Products |
Adobe
Adobe experience Manager |
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-07-23T11:34:54.665Z
Updated: 2024-10-07T12:27:38.097Z
Reserved: 2024-07-22T17:16:40.934Z
Link: CVE-2024-41839
Vulnrichment
Updated: 2024-08-02T04:46:52.694Z
NVD
Status : Modified
Published: 2024-07-23T12:15:10.520
Modified: 2024-09-16T13:15:10.250
Link: CVE-2024-41839
Redhat
No data.