Security Advisory

CVE-2018-4876

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-27 05:00:00

Last updated 2024-08-05 05:18:26

Assigner adobe

CVSS score not scored

State PUBLISHED

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.