MEDIUM
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability
Published Sep 6, 2018
6.1
MEDIUMCVSS 3.0
EPSS 3.86%
Description
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Affected products
- Vendor n/a Product Adobe Experience Manager Defaultn/a
- Version 6.4, 6.3, 6.2, 6.1, and 6.0 versionsStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Adobe Experience Manager | n/a |
|
Configuration 1
OR
- ≥ 6.3.2.1 · ≤ 6.3.2.2
- 6.4
Configuration 2
- ≥ 6.2.1.1 · ≤ 6.2.1.14
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- http://www.securityfocus.com/bid/105073 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041470 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/experience-manager/apsb18-26.html x_refsource_CONFIRMPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/105073 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.securitytracker.com/id/1041470 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| https://helpx.adobe.com/security/products/experience-manager/apsb18-26.html | x_refsource_CONFIRMPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner adobe
Published Sep 6, 2018
Updated Aug 5, 2024
Reserved Jan 3, 2018
Link CVE-2018-5005
CISA Vulnrichment
Updated n/a