CVE-2024-41849CWE-20

Adobe Experience Manager | Improper Input Validation (CWE-20)

Medium · published August 23, 2024

CVSS v3.1
4.1
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue requires user interaction and scope is changed.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00400 · 33.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-08-23T16:53Z
EPSS history
Timeline
  • 23 AUG 16:53Z
    Adobe Experience Manager | Improper Input Validation (CWE-20)
    cvelistv5