CVE-2024-43755 — Improper Input Validation in Adobe Experience Manager

CWE-20 — Improper Input ValidationCWE-79 — Cross-site Scripting4 documents4 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 58.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Experience ManagerAdobe Experience Manager
Timeline
PublishedDec 10
Latest updateAug 21

Description

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

▶NVDadobe/experience_manager< 6.5.22.0+1

🔴Vulnerability Details

3
GHSA
Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter↗2025-08-21
▶
GHSA
GHSA-pmjf-6j47-g4gw: Adobe Experience Manager versions 6↗2024-12-11
▶
CVEList
Adobe Experience Manager | Improper Input Validation (CWE-20)↗2024-12-10
▶
CVE-2024-43755 — Improper Input Validation in Adobe | cvebase