CVSS 3.1 Score 5.4 of 10 (medium)


Published Mar 18, 2024


CVE-2024-26118 is a reflected Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.19 and earlier. The vulnerability allows an attacker to execute malicious JavaScript content within a victim's browser if they can convince the victim to visit a URL referencing a vulnerable page. The risk score is 26, indicating a medium severity level. The exploitability score is 2.3 out of 10, suggesting it is relatively easy to exploit. The impact score is 2.7 out of 10, indicating low integrity and confidentiality impacts, as well as no availability impact. To remediate the vulnerability, users should update their Adobe Experience Manager software to version 6.5.20 or later when available to mitigate the risk of exploitation and protect their organization from potential attacks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-26118 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options