CVE-2024-49524

Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run when the page is rendered. This type of attack requires user interaction, as the victim would need to access a manipulated URL or provide specific input to trigger the vulnerability.

• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb24-28.htmlVendor Advisory

Published

Nov 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-49519Substance3D - Painter versions 10.1.0 and earlier are affect…7.8
• CVE-2024-4952Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-49520Substance3D - Painter versions 10.1.0 and earlier are affect…7.8
• CVE-2024-49521Adobe Commerce versions 3.2.5 and earlier are affected by a …7.7
• CVE-2024-49522Substance3D - Painter versions 10.0.1 and earlier are affect…7.8
• CVE-2024-49523Adobe Experience Manager versions 6.5.20 and earlier are aff…5.4
• CVE-2024-49525Substance3D - Painter versions 10.1.0 and earlier are affect…7.8
• CVE-2024-49526Animate versions 23.0.7, 24.0.4 and earlier are affected by …7.8
• CVE-2024-49527Animate versions 23.0.7, 24.0.4 and earlier are affected by …5.5
• CVE-2024-49528Animate versions 23.0.7, 24.0.4 and earlier are affected by …7.8
• CVE-2024-49529InDesign Desktop versions 19.0, 20.0 and earlier are affecte…5.5
• CVE-2024-49530Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.3…7.8