CVE-2024-41878

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to inject and execute arbitrary JavaScript code within the context of the user's browser session. Exploitation of this issue requires user interaction, such as convincing a victim to click on a malicious link.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb24-05.htmlVendor Advisory

Published

Aug 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41872Media Encoder versions 24.5, 23.6.8 and earlier are affected…5.5
• CVE-2024-41873Media Encoder versions 24.5, 23.6.8 and earlier are affected…5.5
• CVE-2024-41874ColdFusion versions 2023.9, 2021.15 and earlier are affected…9.8
• CVE-2024-41875Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-41876Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-41877Adobe Experience Manager versions 6.5.19 and earlier are aff…5.4
• CVE-2024-41879Acrobat Reader versions 127.0.2651.105 and earlier are affec…7.8
• CVE-2024-4188Unprotected Transport of Credentials vulnerability in OpenTe…7.1
• CVE-2024-41880In veilid-core in Veilid before 0.3.4, the protocol's ping f…5.3
• CVE-2024-41881SDoP versions prior to 1.11 fails to handle appropriately so…8.8
• CVE-2024-41882Team ENVY, a Security Research TEAM has found a flaw that al…6.9
• CVE-2024-41883Team ENVY, a Security Research TEAM has found a flaw that al…6.9