CyberRota Analysis
AI-GeneratedAdobe Experience Manager is vulnerable to a DOM-based Cross-Site Scripting (XSS) flaw that allows attackers to execute malicious JavaScript in the victim's browser, contingent upon user interaction with a specially crafted webpage. This medium-severity vulnerability could lead to unauthorized actions or data exposure for users of affected Java products. Organizations utilizing Adobe Experience Manager should prioritize addressing this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)