CVE-2023-21615

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 22, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216165.4Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privilegedCVE-2023-216187.8Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result iCVE-2023-216197.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitraCVE-2023-21625.5A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux KerneCVE-2023-216205.5FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosureCVE-2023-216217.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in aCVE-2023-216227.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitraCVE-2023-216245.5Information disclosure in DSP Services while loading dynamic module.CVE-2023-216257.5Information disclosure in Network Services due to buffer over-read while the device receives DNS response.CVE-2023-216267.1Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.CVE-2023-216277.8Memory corruption in Trusted Execution Environment while calling service API with invalid address.CVE-2023-216287.8Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.