CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function

published February 27, 2018

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03973 · 90.4th percentile
Published
2018-02-27T05:00Z
EPSS history
Timeline
  • 27 FEB 05:00Z
    Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function
    cvelistv5