Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-47991

Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager as a Cloud Service

Default version status: unaffected

  • 0 to ≤ 2026.4.0affected
  • 2026.5.0unaffected

Adobe Adobe Experience Manager 6.5 LTS

Default version status: unaffected

  • 0 to ≤ SP1affected
  • SP2unaffected

Adobe Adobe Experience Manager 6.5

Default version status: unaffected

  • 0 to ≤ 6.5.24affected
  • 6.5.25unaffected

References