Adobe Experience Manager CVE-2018-15969 HTML Injection Vulnerability
BID:105576
CVE-2018-15969 |Info
Adobe Experience Manager CVE-2018-15969 HTML Injection Vulnerability
| Bugtraq ID: | 105576 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-15969 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 09 2018 12:00AM |
| Updated: | Oct 09 2018 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Adobe Experience Manager 6.4 Adobe Experience Manager 6.3 Adobe Experience Manager 6.2 Adobe Experience Manager 6.1 Adobe Experience Manager 6.0 |
| Not Vulnerable: | |
Discussion
Adobe Experience Manager CVE-2018-15969 HTML Injection Vulnerability
Adobe Experience Manager is prone to a HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.
Adobe Experience Manager 6.0, 6.1, 6.2, 6.3 and 6.4 are vulnerable.
Adobe Experience Manager is prone to a HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.
Adobe Experience Manager 6.0, 6.1, 6.2, 6.3 and 6.4 are vulnerable.