CVE-2024-26101

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Mar 18, 2024
CWE ID 79

Summary

CVE-2024-26101 is a reflected Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.19 and prior. This issue allows malicious JavaScript code to be executed within a victim's browser if they visit a specially crafted URL referencing a vulnerable page. Attackers can exploit this vulnerability to steal sensitive information or install malware. Users are advised to update their Adobe Experience Manager installations as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share