CVE-2024-43712

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could allow an attacker to execute arbitrary code in the context of the victim's browser. This issue occurs when data from a user-controllable source is improperly sanitized before being used in the Document Object Model (DOM) of a web page, leading to the execution of malicious scripts. Exploitation of this issue requires user interaction, such as tricking a victim into clicking a link or navigating to a malicious website.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb24-69.htmlVendor Advisory

Published

Dec 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43706Improper authorization in Kibana can lead to privilege abuse…8.8
• CVE-2024-43707An issue was identified in Kibana where a user without acces…6.5
• CVE-2024-43708An allocation of resources without limits or throttling in K…6.5
• CVE-2024-43709An allocation of resources without limits or throttling in E…7.5
• CVE-2024-4371The CoDesigner WooCommerce Builder for Elementor – Customize…9.8
• CVE-2024-43710A server side request forgery vulnerability was identified i…4.3
• CVE-2024-43713Adobe Experience Manager versions 6.5.21 and earlier are aff…5.4
• CVE-2024-43714Adobe Experience Manager versions 6.5.21 and earlier are aff…5.4
• CVE-2024-43715Adobe Experience Manager versions 6.5.21 and earlier are aff…5.4
• CVE-2024-43716Adobe Experience Manager versions 6.5.21 and earlier are aff…4.3
• CVE-2024-43717Adobe Experience Manager versions 6.5.21 and earlier are aff…4.3
• CVE-2024-43718Adobe Experience Manager versions 6.5.21 and earlier are aff…5.4