CVE-2020-9648: XSS
Published Jun 12, 2020
·Updated
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
Affected Software
2 affected components
Adobe Experience Manager>=6.4<6.4.8.1
Adobe Experience Manager>=6.5<6.5.5.0
Remediation
Event History
Jun 12, 2020
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-9648?
CVE-2020-9648 is classified as a critical vulnerability due to the potential for arbitrary JavaScript execution in users' browsers.
2
How do I fix CVE-2020-9648?
To mitigate CVE-2020-9648, update Adobe Experience Manager to version 6.5.6.0 or later.
3
Which versions of Adobe Experience Manager are affected by CVE-2020-9648?
CVE-2020-9648 affects Adobe Experience Manager versions 6.5 and earlier, specifically from version 6.4 to 6.5.5.0.
4
What type of vulnerability is CVE-2020-9648?
CVE-2020-9648 is a cross-site scripting (XSS) vulnerability, allowing for the execution of malicious scripts.
5
What can be exploited through CVE-2020-9648?
Successful exploitation of CVE-2020-9648 can lead to arbitrary JavaScript execution in a victim's web browser.