CVE-2020-9647: XSS
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9647?
CVE-2020-9647 is considered a medium severity vulnerability due to the potential for arbitrary JavaScript execution.
How do I fix CVE-2020-9647?
To fix CVE-2020-9647, update Adobe Experience Manager to version 6.5.5.1 or later, or apply the recommended security patches.
What types of attacks are possible with CVE-2020-9647?
CVE-2020-9647 allows attackers to execute arbitrary JavaScript in the user's browser, which can lead to session hijacking or other malicious actions.
Which versions of Adobe Experience Manager are affected by CVE-2020-9647?
CVE-2020-9647 affects Adobe Experience Manager versions 6.5 and earlier, specifically prior to version 6.5.5.1.
Is CVE-2020-9647 a persistent vulnerability?
No, CVE-2020-9647 is a DOM-based cross-site scripting vulnerability that requires user interaction to exploit.