Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-106630

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.

Affected versions

  • Adobe Adobe Experience Manager 6.5 LTS

    through 6.5 LTS SP3

  • Adobe Adobe Experience Manager 6.5

    through 6.5.25

References 1

helpx.adobe.com