CVE-2023-48609

Summary

CVE-2023-48609 is a Cross-site Scripting (DOM-based XSS) vulnerability that affects Adobe Experience Manager versions 6.5.18 and earlier. This vulnerability allows a low-privileged attacker to execute malicious JavaScript content in the victim's browser if they are able to convince the victim to visit a URL referencing a vulnerable page. The vulnerability has a risk score of 25 and a base severity of MEDIUM. The affected products include various versions of Adobe Experience Manager and other related software. To remediate this vulnerability, organizations should update to a version higher than 6.5.18 to mitigate the potential danger it poses to their systems and users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.