Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager
CVE-2018-4929

6.1MEDIUM

Key Information:

Vendor

Adobe
Status
Adobe Experience Manager Aem 6.2 And Earlier
Vendor
CVE Published:
19 May 2018

What is CVE-2018-4929?

Adobe Experience Manager versions 6.2 and earlier contain a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive user data, posing significant risks to organizations that utilize these affected versions. It is crucial for users to apply security patches and updates to mitigate this vulnerability.

Affected Version(s)

Adobe Experience Manager AEM 6.2 and earlier Adobe Experience Manager AEM 6.2 and earlier

References

http://www.securityfocus.com/bid/103707
vdb-entryx_refsource_BID
https://helpx.adobe.com/security/products/experience-mana...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.