Lucene search

China National Vulnerability DatabaseCNVD-2024-01185

HistoryDec 15, 2023 - 12:00 a.m.

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-0118532)

2023-12-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

adobe experience manager

cross-site scripting

version 6.5.18

security vulnerability

web script

html

injection

crafted payload

odobie

content management solutions

mobile applications

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

17.4%

JSON

Adobe Experience Manager (AEM) is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie (Adobe). The program supports mobile content management, marketing and sales campaign management and multi-site management. A security vulnerability exists in Adobe Experience Manager version 6.5.18 and prior versions, which can be exploited by an attacker to execute arbitrary web script or HTML via injection of a crafted payload.