CVE-2019-8089

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.1MEDIUM

EPSS

1.4%

top 19.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe Adobe Experience Manager Forms Adobe Experience Manager Forms

Timeline

PublishedOct 22

Latest updateMay 24

Description

Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶NVDadobe/experience_manager_forms6.3, 6.4, 6.5+2

▶CVEListV5adobe/adobe_experience_manager_formsAdobe Experience Manager Forms versions 6.3-6.5

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-pp5v-p8x7-m4g8: Adobe Experience Manager Forms versions 6↗2022-05-24

▶

CVEList

CVE-2019-8089: Adobe Experience Manager Forms versions 6↗2019-10-22

▶