CVE-2024-36216 in Experience Manager

Сводка

по MITRE • 13.06.2024

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Ответственный: Adobe Systems Incorporated
• Резервировать: 21.05.2024
• Раскрытие: 13.06.2024
• Модерация: принято
• Вход: VDB-268383
• CPE: готов
• CWE: CWE-79 (Подтверждённый)
• CVSS: 6.1 (NVD)
• EPSS: 0.00363
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Hostingprovider, Lawfirm, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36216
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36216
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36216/