Adobe Experience Manager XSS

Adobe Experience Manager (AEM) is a content management system used by many organizations to manage and deliver digital experiences. The vulnerability in AEM allows an attacker to inject malicious JavaScript into form fields, potentially executing scripts in users' browsers when they interact with the affected page.

Affected versions: 6.5.23

To fix this vulnerability, upgrade to Adobe Experience Manager version 6.5.24 or later. You can download the latest version from the Adobe website: https://www.adobe.com/go/download-experience-manager.html

Immediate mitigations:

• Restrict network access to your AEM instance (firewall it from the public internet)
• Audit admin account activity for suspicious access patterns
• Monitor for unauthorized token creation

• Vendor Advisory