CVE-2019-8085: XSS

Published Oct 25, 2019

Updated

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Affected Software

4 affected components

Adobe Experience Manager=6.2

Adobe Experience Manager=6.3

Adobe Experience Manager=6.4

Adobe Experience Manager=6.5

Event History

Oct 25, 2019

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-8085?

CVE-2019-8085 is classified as a reflected cross-site scripting vulnerability in Adobe Experience Manager that poses a risk of sensitive information disclosure.

How do I fix CVE-2019-8085?

To mitigate CVE-2019-8085, users should apply the latest patches provided by Adobe for affected versions of Experience Manager.

Which versions of Adobe Experience Manager are affected by CVE-2019-8085?

CVE-2019-8085 affects Adobe Experience Manager versions 6.2, 6.3, 6.4, and 6.5.

What type of vulnerability is CVE-2019-8085?

CVE-2019-8085 is a reflected cross-site scripting vulnerability that allows attackers to potentially disclose sensitive information.

Can CVE-2019-8085 be exploited remotely?

Yes, CVE-2019-8085 can be exploited remotely if a vulnerable version of Adobe Experience Manager is accessible.