CNVD-2024-02688 — Vulnetix

CNVD-2024-02688 PUBLISHED CVSS 5.300000190734863 MEDIUM

Adobe Experience Manager（AEM）是美国奥多比（Adobe）公司的一套可用于构建网站、移动应用程序和表单的内容管理解决方案。该方案支持移动内容管理、营销销售活动管理和多站点管理等。 Adobe Experience Manager 6.5.18.0版本及之前版本存在安全漏洞，攻击者可利用该漏洞通过注入精心设计的有效载荷执行任意Web脚本或HTML。

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions
Adobe	Adobe Experience Manager	0

Exploit Intelligence

https://helpx.adobe.com/security/products/experience-manager/apsb23-72.html (circl)
CIRCL seen: CVE-2023-48441 (circl-sighting)
CIRCL seen: CVE-2023-48441 (circl-sighting)

Timeline

Dec 12, 2023 CVE Published
Jan 4, 2024 PoC Published
Jan 11, 2024 PoC Published

References

https://helpx.adobe.com/security/products/experience-manager/apsb23-72.html vendor-advisory

Open in Interactive Console →