Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a malicious link or to interact with a maliciously crafted web page.
References
Link | Resource |
---|---|
https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html | Vendor Advisory |
https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 09:21
Type | Values Removed | Values Added |
---|---|---|
References | () https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html - Vendor Advisory |
17 Jun 2024, 20:20
Type | Values Removed | Values Added |
---|---|---|
First Time |
Adobe
Adobe experience Manager |
|
References | () https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html - Vendor Advisory | |
CPE | cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:* |
13 Jun 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
13 Jun 2024, 08:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-13 08:16
Updated : 2024-11-21 09:21
NVD link : CVE-2024-36238
Mitre link : CVE-2024-36238
CVE.ORG link : CVE-2024-36238
JSON object : View
Products Affected
adobe
- experience_manager
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')