CVE-2024-41849

Summary

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue requires user interaction and scope is changed.

Affected Software

VendorProductVersion RangeStatus
AdobeAdobe Experience Manager0 <= 6.5.20affected

Weaknesses

  • CWE-20: Improper Input Validation (CWE-20)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References