CVE-2025-64539

CVE-2025-64539 affects Adobe Experience Manager 6.5.23 and earlier. It describes a DOM-based Cross-Site Scripting (XSS) vulnerability in AEM’s web context that could lead to arbitrary code execution. Exploitation requires user interaction (visiting a crafted page), and successful abuse can enable...

CVE-2025-64539 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the...