CVE-2023-48494

Summary

CVE-2023-48494 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and earlier. This issue is DOM-based, meaning it can be exploited even if the attacker and victim are on different websites. If an attacker creates a malicious URL and convinces a victim to visit it, the victim's browser may execute the attacker's malicious JavaScript code within the victim's context, potentially leading to unauthorized access or data theft.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.