Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a malicious link or to interact with a maliciously crafted web page.
References
Link | Resource |
---|---|
https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2024, 20:20
Type | Values Removed | Values Added |
---|---|---|
References | () https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html - Vendor Advisory | |
First Time |
Adobe
Adobe experience Manager |
|
CPE | cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:* |
13 Jun 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
13 Jun 2024, 08:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-13 08:16
Updated : 2024-06-17 20:20
NVD link : CVE-2024-36238
Mitre link : CVE-2024-36238
CVE.ORG link : CVE-2024-36238
JSON object : View
Products Affected
adobe
- experience_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')