CVE-2023-48608: 
Adobe Experience Manager vulnerability analysis and mitigation

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Input Validation vulnerability identified as CVE-2023-48608. The vulnerability was discovered and disclosed on December 15, 2023, affecting both cloud service and standard installations of Adobe Experience Manager (NVD, CVE).

The vulnerability is classified as an Improper Input Validation issue (CWE-20). It has been assigned a CVSS v3.1 Base Score of 3.5 LOW with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs low privileges, and requires user interaction (NVD).

If exploited, this vulnerability could allow a low-privileged attacker to achieve a low-integrity impact within the application. The impact is limited to integrity effects, with no confidentiality or availability impacts noted (NVD).

The vulnerability requires user interaction for successful exploitation. A low-privileged attacker could potentially leverage this vulnerability, though specific exploit conditions must be met (NVD).

Adobe has addressed this vulnerability in versions after 6.5.18. Users are advised to update to the latest version of Adobe Experience Manager (Adobe Advisory).