Vulnerability · Published Aug 24, 2021 · Assigned by adobe
CVE-2021-28628Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp
Medium 6.3
In plain English
A medium-severity cross-site scripting in Experience Manager from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Official description
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Experience Manager | unspecified – through 6.5.8.0unspecified – through None |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L