Adobe Experience Manager Cloud Service vulnerabilities

CVE-2022-42367 [MEDIUM] CWE-79 CVE-2022-42367: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-44473 [MEDIUM] CWE-79 CVE-2022-44473: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-42366 [MEDIUM] CWE-79 CVE-2022-42366: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-42351 [MEDIUM] CWE-863 CVE-2022-42351: Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vuln Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.

CVE-2022-44469 [MEDIUM] CWE-79 CVE-2022-44469: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-44468 [MEDIUM] CWE-79 CVE-2022-44468: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-35696 [MEDIUM] CWE-79 CVE-2022-35696: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-42360 [MEDIUM] CWE-79 CVE-2022-42360: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-35694 [MEDIUM] CWE-79 CVE-2022-35694: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2022-44462 [MEDIUM] CWE-79 CVE-2022-44462: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.