Servers and applications
CVE-2024-43720
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code in the context of the victim's browser session. By manipulating the DOM environment in the victim's browser, an attacker can inject malicious scripts that are executed by the victim's browser. Exploitation of this issue…
- Severity
- Medium 5.4
- Published
- 10 Dec 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 6.5.22.0, 2024.11.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Adobe Experience ManagerServers and applications · cpe:a:adobe:experience_manager |
|