Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.1
CVE-2018-4929: Adobe Experience Manager may expose sensitive data
CVE-2018-4929 · published 8 years ago
Summary
Versions 6.2 and earlier of Adobe Experience Manager can be tricked into storing malicious code that runs in a user's browser. This could allow attackers to view confidential information. Update to a newer version or apply the vendor's security patch to stop the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | experience_manager |
<= 6.2.0 cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:* |
Original advisory text
Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
References
- http://www.securityfocus.com/bid/103707 Third Party Advisory VDB Entry
- https://helpx.adobe.com/security/products/experience-manager/apsb18-10.html Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published19 May 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-4929 · NVD
Track software like this
Free during beta