Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:web_content_management_core_components:*:*:*:*:*:adobe_experience_manager:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductWeb Content Management Core Components (94715ac8-0511-58bc-99fb-bd82394f9de0)
Edition*
Language*
Software edition*
Target softwareadobe_experience_manager
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-35697 vulnerable 2026-06-08 05:46:05.154129 AEM File Upload Security Issue leading to RXSS
MEDIUM (5.4)
Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires a low author privilege access.
Published: 2022-08-09T20:12:33.573Z
Updated: 2025-04-23T17:53:10.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.