CVE-2024-41849

MEDIUM

4.1

Descripcion

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue requires user interaction and scope is changed.

Detalles CVE

Puntuacion CVSS v3.14.1

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado8/23/2024

Ultima modificacion8/26/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

adobe:experience_manager

Debilidades (CWE)

CWE-20

Referencias

https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html(psirt@adobe.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.