Description
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Adobe Adobe Experience Manager as a Cloud Service
Default version status: unaffected
0 to ≤ 2026.7.0affected2026.8.0unaffected
Adobe Adobe Experience Manager 6.5 LTS
Default version status: unaffected
0 to ≤ SP2affectedSP3unaffected
Adobe Adobe Experience Manager 6.5
Default version status: unaffected
0 to ≤ 6.5.24affected6.5.25unaffected