CVE-2026-48268 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

🗓️ 09 Jun 2026 16:48:52Reported by adobeType

Adobe Experience Manager has a DOM based cross site scripting flaw in affected versions exploitable via crafted page and user interaction.

Reporter	Title	Published	Views	Family All 12
Tenable Nessus	Adobe Experience Manager 6.5.0 < 6.5.2 Multiple Vulnerabilities (APSB26-56)	14 Jul 202600:00	–	nessus
BDU FSTEC	The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages. This allows a malicious actor to execute arbitrary JavaScript code within the context of a legitimate user’s session.	17 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages. This allows a malicious actor to execute arbitrary JavaScript code within the context of a legitimate user’s session.	17 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-48268	10 Jun 202600:31	–	circl
CNNVD	Adobe Experience Manager 跨站脚本漏洞	9 Jun 202600:00	–	cnnvd
CNVD	Adobe Experience Manager Cross-Site Script Vulnerability (CNVD-2026-24906)	11 Jun 202600:00	–	cnvd
CVE	CVE-2026-48268	9 Jun 202616:48	–	cve
EUVD	EUVD-2026-35632	9 Jun 202618:30	–	euvd
NVD	CVE-2026-48268	9 Jun 202617:17	–	nvd
Positive Technologies	PT-2026-48090	9 Jun 202600:00	–	ptsecurity

[
  {
    "defaultStatus": "affected",
    "product": "Adobe Experience Manager",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2026.04",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/experience-manager/apsb26-56.html

09 Jun 2026 16:48Current

CVSS 3.15.4

EPSS0.00207

CWE-79