Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-83662

Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Affected versions

  • Adobe Adobe Experience Manager as a Cloud Service

    through 2026.9.28187

  • Adobe Adobe Experience Manager 6.5 LTS

    through 6.5 LTS SP3

  • Adobe Adobe Experience Manager 6.5

    through 6.5.25

References 1

helpx.adobe.com