CVE-2023-48452
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Dec 15, 2023
Updated: Dec 18, 2023
CWE ID 79
Summary
CVE-2023-48452 is a Cross-site Scripting (XSS) vulnerability that affects Adobe Experience Manager versions 6.5.18 and earlier. Malicious JavaScript code can be executed within the victim's browser if they visit a URL referencing a vulnerable page, even if the attacker has low privileges. This issue presents a serious security risk and could lead to data theft or unauthorized access. Users are advised to update their Adobe Experience Manager software as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Adobe Experience Manager
- Adobe Experience Manager AEM Cloud Service
Affected Vendors
- Adobe