Adobe Experience Manager is a web content management system used by organizations to manage and publish their websites. This vulnerability allows attackers to inject malicious scripts into form fields, which can be executed in a victim's browser when they browse to the affected page.
Affected versions: 6.5.23
Upgrade to Adobe Experience Manager 6.5.24 or later.
- Immediate mitigations:
- Restrict network access to your AEM instance (firewall it from the public internet)
- Audit admin account activity for suspicious access patterns
- Monitor for unauthorized token creation