CVE-2017-3109

MEDIUM 6.1CVE-2017-3109 · Published 09/12/2017 · updated 17/06/2026

In short

CVE-2017-3109 is a MEDIUM (CVSS 6.1) vulnerability affecting experience manager (adobe).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
experience manager adobe	`= 6.0.0= 6.1.0= 6.2.0= 6.3.0`	No fix yet

Description

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet.

References

securityfocus.com/bid/101834 · Third Party Advisory
securitytracker.com/id/1039800 · Third Party Advisory
helpx.adobe.com/security/products/experience-manager/apsb17-41.html · Vendor Advisory

More vulnerabilities in experience manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

experience manager

adobe

= 6.0.0= 6.1.0= 6.2.0= 6.3.0

No fix yet

More vulnerabilities in experience manager

See all →