Adobe Experience Manager XSS

Adobe Experience Manager is a web content management system used by organizations to manage their websites and digital experiences. The vulnerability in question allows an attacker to inject malicious scripts into form fields on vulnerable pages, potentially executing JavaScript code in the victim's browser.

Affected versions: 6.5.23

1. Upgrade to Adobe Experience Manager 6.5.24 or later.
2. For immediate mitigations:
3. Restrict network access to your AEM instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized token creation

• Vendor Advisory