CVE-2024-41849

MEDIUM

4.1

Description

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue requires user interaction and scope is changed.

Details CVE

Score CVSS v3.14.1

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie8/23/2024

Derniere modification8/26/2024

Sourcenvd

Observations honeypot0

Produits affectes

adobe:experience_manager

Faiblesses (CWE)

CWE-20

References

https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html(psirt@adobe.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.