CVE-2025-64589

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields , which execute in a victim's browser when they visit the affected page. The vulnerability scores CVSS 5.4 (MEDIUM...

CVE-2026-75742

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) in vulnerable form fields. A low-privileged attacker can inject malicious scripts that execute in a victim's browser when they view the affected page. The vulnerability carries a CVSS 3.1 score of 5...

CVE-2026-75635

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit it by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visit ...

CVE-2026-75713

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction , as the victim must visit a craf...

CVE-2026-75739

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious JavaScript into vulnerable form fields, which then executes in a victim's browser when they view the affected page. The vulnerability carries a CVSS 3...

CVE-2026-75666

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction : the victim must visit a...

CVE-2026-72627

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpag...

CVE-2026-19644

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction , as the victim must ...

CVE-2026-75674

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction , specifically that t...

CVE-2026-75709

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpag...

CVE-2026-75652

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation requires user interaction , as the victi...

CVE-2025-64610

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they view the affected page. The changed scope (CVSS 3.1: 5.4 MEDIUM , vector AV:...

CVE-2026-75733

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they view the affected page. The vulnerability requires user interaction...

CVE-2026-75661

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser, but exploitation requires the victim to visit a crafted webpage (user interaction required...

CVE-2026-75691

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpag...

CVE-2026-75725

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser, requiring the victim to visit a crafted webpage. The vulnerability carries a CVSS 3.1 scor...

CVE-2026-75647

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction , as the victim must visit a crafted we...

CVE-2025-64584

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) in vulnerable form fields. A low-privileged attacker can inject malicious scripts that execute in a victim's browser when the victim browses the affected page. The vulnerability carries a CVSS 3.1 s...

CVE-2026-75740

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when the page is viewed. The CVSS 3.1 base score is 5.4 (MEDIUM) with a chang...

CVE-2026-75669

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit it by manipulating the DOM environment to execute malicious JavaScript within the victim's browser. Exploitation requires user interaction : the victim must visit a craft...

CVE-2026-75710

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction , as the victim must visit a crafted webpage. The c...

CVE-2026-75668

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpag...

CVE-2026-71388

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction , as the victim must visit a crafted we...

CVE-2026-75716

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction — the victim must visit a crafted webpa...

CVE-2026-75683

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in the context of a victim's browser. Exploitation requires user interaction —the victim must vis...

CVE-2026-75639

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in a victim's browser. Exploitation requires user interaction —specifically, the victim must visi...

CVE-2026-72626

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction , as the victim must visit a crafted we...

CVE-2026-75731

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) with a CVSS 3.1 base score of 5.4 (MEDIUM) . A low-privileged attacker can inject malicious scripts into vulnerable form fields ; when a victim browses the page, the injected JavaScript executes in ...

CVE-2026-19232

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow a low-privileged remote attacker to achieve arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session....

CVE-2026-75738

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields ; the injected JavaScript executes in a victim's browser when they view the affected page. The CVSS 3.1 score is 5...

CVE-2026-19713

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction , as the victim must visit a crafted webpag...

CVE-2025-64618

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse the affected page. The attack requires user interaction and ...

CVE-2026-75629

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpage. The CVS...

CVE-2026-75659

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction , as the victim must visit a crafted webpage. The s...

CVE-2026-75722

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction (the victim must visit a ...

CVE-2026-75718

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visi...

CVE-2026-75651

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpag...

CVE-2026-75695

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can manipulate the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , as the victim must visit a craf...

CVE-2026-75727

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields , which execute in a victim's browser when the page is viewed. The changed scope and required user interaction lim...

CVE-2026-75680

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction —specifically, the victim must visit a...

CVE-2026-27227

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in form fields. The root cause is insufficient input sanitization and output encoding , allowing a low-privileged attacker to inject malicious JavaScript that executes in a victi...

CVE-2026-75675

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction —the victim must visit a crafted ...

CVE-2026-75702

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction (the victim must visit a crafted webpag...

CVE-2026-75712

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit it by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction — the victim must visit...

CVE-2026-75700

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation requires user interaction — the victim must visit a crafte...

CVE-2026-75711

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction —the victim must visit a crafted webpage. T...

CVE-2026-71440

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when the page is viewed. The CVSS 3.1 base score is 5.4 (MEDIUM) with a vecto...

CVE-2025-64868

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) in form fields. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they view the affected page. The CVSS 3.1 score is 5.4 (M...

CVE-2026-75737

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser upon viewing the affected page. The attack requires user interaction and cros...

CVE-2026-71356

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript in the victim's browser context, requiring the victim to visit a crafted webpage. The CVSS v3.1 b...