CVE-2023-48474: Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48474?
CVE-2023-48474 has been assigned a severity rating that indicates a noticeable risk of Cross-site Scripting (DOM-based XSS) vulnerabilities in affected Adobe Experience Manager versions.
How do I fix CVE-2023-48474?
To remediate CVE-2023-48474, it is recommended to upgrade Adobe Experience Manager to version 6.5.19 or later.
What versions are affected by CVE-2023-48474?
CVE-2023-48474 affects Adobe Experience Manager versions 6.5.18 and earlier, including the Adobe Experience Manager Cloud Service versions before 2023.11.
What types of attacks can CVE-2023-48474 facilitate?
CVE-2023-48474 can facilitate Cross-site Scripting (DOM-based XSS) attacks that may allow malicious JavaScript execution in the context of victim users.
Who can exploit CVE-2023-48474?
CVE-2023-48474 can be exploited by low-privileged attackers who can convince victims to navigate to a specially crafted URL targeting the vulnerable Adobe Experience Manager page.