CVE-2022-35664

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.13.0 and earlier

Description The issue is related to a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this by convincing a victim to visit a specially crafted URL referencing a vulnerable page, potentially leading to the execution of malicious JavaScript content within the victim's browser. This exploitation requires low-privilege access to AEM. The vulnerability exists due to inadequate protection of the web page structure, which could allow a remote attacker to execute arbitrary code using a specially crafted link.

Recommendations For Adobe Experience Manager versions 6.5.13.0 and earlier, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to vulnerable pages or implementing additional security measures to protect against malicious links.