CVE-2024-26082: 
Adobe Experience Manager vulnerability analysis and mitigation

CVE-2024-26082 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The vulnerability was discovered and disclosed in June 2024, with Adobe Systems Incorporated being the source of the CVE (NVD).

The vulnerability is classified as a stored Cross-Site Scripting (XSS) issue (CWE-79) that allows attackers to inject malicious scripts into vulnerable form fields. It has received a CVSS v3.1 base score of 5.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, indicating network accessibility, low attack complexity, required privileges, and user interaction (NVD).

When exploited, this vulnerability allows malicious JavaScript to be executed in a victim's browser when they browse to a page containing the vulnerable field. The impact is considered moderate, with potential for information disclosure and limited system compromise (NVD).

The vulnerability requires an attacker to have some level of privileges and user interaction for successful exploitation. The attack vector is network-accessible, making it potentially exploitable from remote locations (NVD).

Adobe has addressed this vulnerability in versions after 6.5.20. Users are advised to upgrade to the latest version of Adobe Experience Manager to mitigate this security risk (Adobe Advisory).