Adobe Experience Manager XSS Vulnerability

Adobe Experience Manager (AEM) is a web content management system used by organizations to manage and publish their websites. This vulnerability allows attackers to inject malicious scripts into vulnerable form fields, potentially executing them in the victim's browser when they browse to the affected page.

Affected versions: 6.5.23

1. Upgrade to Adobe Experience Manager versions 6.5.24 or later from the official Adobe website: https://www.adobe.com/go/aem64bit.
2. Immediate mitigations:
3. Restrict network access to your AEM instance (firewall it from the public internet).
4. Audit admin account activity for suspicious access patterns.
5. Monitor for unauthorized token creation.

• Vendor Advisory