Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
概要
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
影響パッケージ
| パッケージ | 影響を受ける版 → 修正版 | |
|---|---|---|
| AdobeAdobe Experience Manager as a Cloud Service |
2026.10.29023 以前→ 記載なし |
記載なし |
| AdobeAdobe Experience Manager 6.5 |
6.5.25 以前→ 記載なし |
記載なし |
| AdobeAdobe Experience Manager 6.5 LTS |
6.5 LTS SP3 以前→ 記載なし |
記載なし |
この記録には修正版の版が載っていません。修正版の有無と版は、本文か参照URLのベンダーの勧告で確かめてください。
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
出典: CVE.org (CVE Program・cvelistV5) NVD
参照URL
- web psirt@adobe.com