Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user interaction, as the victim needs to visit a web page with a maliciously crafted script.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html | Vendor Advisory |
| https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 09:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html - Vendor Advisory |
17 Jun 2024, 20:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Adobe
Adobe experience Manager |
|
| References | () https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html - Vendor Advisory | |
| CPE | cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:* |
13 Jun 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
13 Jun 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-13 08:15
Updated : 2024-11-21 09:01
NVD link : CVE-2024-26089
Mitre link : CVE-2024-26089
CVE.ORG link : CVE-2024-26089
JSON object : View
Products Affected
adobe
- experience_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')