CVE-2022-35696

Опубликовано: 16 дек. 2022

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Ссылки

https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
Vendor Advisory
https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*

Версия до 6.5.15.0 (исключая)

cpe:2.3:a:adobe:experience_manager_cloud_service:*:*:*:*:*:*:*:*

Версия до 2022.10.0 (исключая)

EPSS

Процентиль: 69%

0.00633

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-xvmp-ph78-3222

CVSS3: 6.1

github

больше 2 лет назад

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

BDU:2022-07451