Adobe Experience Manager vulnerabilities

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

A DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.23 and earlier. A low-privileged attacker can exploit it to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can execute malicious scripts in the victim's browser context, requiring user interaction such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can execute malicious scripts in the context of the victim's browser, requiring user interaction such as visiting a crafted URL.

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse the page containing the vulnerable field.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker could exploit it to execute malicious scripts in the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL.

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 6.5.23 and earlier contain a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can exploit it to execute malicious scripts in the context of the victim's browser, but it requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier contain a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can execute malicious scripts in the context of the victim's browser, but exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier contain a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can execute malicious scripts in the context of the victim's browser, but exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Exploitation requires user interaction – the victim must open a malicious link. Scope is changed.

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Exploitation requires user interaction – the victim must open a malicious link. Scope is changed.

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Exploitation requires user interaction – the victim must open a malicious link. Scope is changed.

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.