Security Advisory

CVE-2021-44178

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-13 20:27:15

Last updated 2024-09-16 23:56:01

Assigner adobe

CVSS score 5.4

State PUBLISHED

Description

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser

← Browse all CVEs View on cve.org ↗