Description (CNA)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Adobe / Adobe Experience Manager as a Cloud Service | affected 0 through 2026.4.0; unaffected 2026.5.0 |
| Adobe / Adobe Experience Manager 6.5 LTS | affected 0 through SP1; unaffected SP2 |
| Adobe / Adobe Experience Manager 6.5 | affected 0 through 6.5.24; unaffected 6.5.25 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.