CVE-2024-36216 in Experience Manager

Résumé

par MITRE • 13/06/2024

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Adobe Systems Incorporated
• Réserver: 21/05/2024
• Divulgation: 13/06/2024
• Modérer: accepté
• Entrée: VDB-268383
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 6.1 (NVD)
• EPSS: 0.00363
• KEV: non
• Activités: très faible
• Secteur: Lawfirm, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36216
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36216
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36216/