CVE Feed

    Dashboard / CVE / CVE-2024-36220

    CVE-2024-36220

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue requires user interaction, such as convincing a victim to click on a specially crafted link or to submit a form that triggers the malicious script.

    Published:Jun 13, 2024
    Last Modified:Nov 21, 2024
    EPS:Jun 13, 2024
    EPSS Score:0.02687
    CVSS Score:5.4

    Affected Products

    Vendor
    Adobe
    Product
    Experience Manager
    Vendor
    Adobe
    Product
    Experience Manager Cloud Service

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-71357 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-75678 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-71565 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-75687 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-75672 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-75734 (CVSS 5.4) — Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused…
    CVE-2026-75706 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-75730 (CVSS 5.4) — Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused…
    CVE-2026-75719 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…
    CVE-2026-75707 (CVSS 5.4) — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker coul…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High