CVE-2019-16466 - Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability

Back Back to CVE browser

MEDIUM

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability

Published Jan 15, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 1.50%

Description

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Affected products

Vendor Adobe Product Adobe Experience Manager Default
unknown
Affected
- 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Adobe Experience Manager	unknown	Affected 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7180
Advisory
https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7180		Advisory
https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Jan 15, 2020

Updated Aug 5, 2024

Reserved Sep 19, 2019

Link CVE-2019-16466

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-16466

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Jan 15, 2020

Updated Aug 5, 2024

Link EUVD-2019-7180

GitHub

No data