Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
概要
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in t...
影響パッケージ
| パッケージ | 影響を受ける版 → 修正版 | |
|---|---|---|
| AdobeAdobe Experience Manager 6.5 |
6.5.25 以前→ 記載なし |
記載なし |
この記録には修正版の版が載っていません。修正版の有無と版は、本文か参照URLのベンダーの勧告で確かめてください。
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
出典: CVE.org (CVE Program・cvelistV5) NVD
参照URL
- web psirt@adobe.com