Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-83958

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager as a Cloud Service

Default version status: unaffected

  • 0 to ≤ 2026.9.28187affected
  • 2026.9.28386unaffected

Adobe Adobe Experience Manager 6.5 LTS

Default version status: unaffected

  • 0 to ≤ 6.5 LTS SP3affected
  • 6.5 LTS SP3 - Hotfix for SITES-49893 + SITES-49334 + SITES-48208unaffected

Adobe Adobe Experience Manager 6.5

Default version status: unaffected

  • 0 to ≤ 6.5.25affected
  • 6.5.25 - Hotfix for SITES-49894 + SITES-49335 + SITES-48207unaffected

References