Adobe Experience Manager XSS Vulnerability

Adobe Experience Manager is a web content management system used by organizations to manage and publish their digital content. The vulnerability in question allows an attacker to inject malicious scripts into vulnerable form fields, potentially executing JavaScript code in the victim's browser when they browse to the affected page.

Affected versions: 6.5.23

To fix this vulnerability, upgrade to Adobe Experience Manager version 6.5.24 or later. You can download the patch from the official Adobe website: https://www.adobe.com/go/rp-64555. Alternatively, you can apply immediate mitigations:

• Restrict network access to your AEM instance (firewall it from the public internet)
• Audit admin account activity for suspicious access patterns
• Monitor for unauthorized token creation

• Vendor Advisory