CVE-2022-30685

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb22-40.htmlVendor Advisory
• https://helpx.adobe.com/security/products/experience-manager/apsb22-40.htmlVendor Advisory

Published

Sep 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3068Improper Privilege Management in GitHub repository octoprint…8.8
• CVE-2022-30680Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30681Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30682Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30683Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.3
• CVE-2022-30684Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30686Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30687Trend Micro Maximum Security 2022 is vulnerable to a link fo…7.1
• CVE-2022-30688needrestart 0.8 through 3.5 before 3.6 is prone to local pri…7.8
• CVE-2022-30689HashiCorp Vault and Vault Enterprise from 1.10.0 to 1.10.2 d…5.3
• CVE-2022-3069The WordLift WordPress plugin before 3.37.2 does not sanitis…4.8
• CVE-2022-30690A cross-site scripting (xss) vulnerability exists in the ima…6.1