Adobe Experience Manager XSS

Adobe Experience Manager (AEM) is a content management system used by organizations to manage and publish their digital experiences. The AEM XSS vulnerability allows an attacker to inject malicious scripts into vulnerable form fields, potentially executing malicious JavaScript in a user's browser.

Affected versions: 6.5.23

1. Upgrade to Adobe Experience Manager version 6.5.24 or later from the official Adobe website: https://www.adobe.com/go/aem-upgrade.html.
2. Immediate mitigations:
3. Restrict network access to your AEM instance (firewall it from the public internet).
4. Audit admin account activity for suspicious access patterns.
5. Monitor for unauthorized token creation.

• Vendor Advisory