Back to Database
Status published
Critical
CVE-2020-24445
Cross-site Scripting Vulnerability in Commenting Function of Adobe Experience Manager (AEM)
Vulnerability Description
AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-24445
Credits & Attribution
No credits recorded in the NVD database.
More from Adobe Systems Incorporated
View All →CVE-2019-8233
In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to...
Medium
6.1
CVE-2019-8232
In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento...
Medium
6.6
CVE-2019-8231
In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an...
High
7.2
CVE-2019-8230
In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an...
High
7.2
CVE-2019-8229
In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3,...
High
7.2
Affected Vendor
Adobe Systems Incorporated
View all reports →Affected Software
Experience Manager
Vulnerable Versions:
<= 6.5.6.0, <= AEM Cloud Service
Timeline
Official Publish:
December 10th, 2020
Last Modified:
September 17th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H