PT-2025-50432
CVE-2025-64615
·
Published
2025-12-09
·
Updated
2026-10-14
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Adobe Experience Manager versions 6.5.23 and earlier
Description
A stored Cross-Site Scripting (XSS) issue exists in Adobe Experience Manager. A low privileged attacker could inject malicious scripts into vulnerable form fields. Execution of malicious JavaScript may occur in a victim’s browser when they browse to the page containing the vulnerable field.
Recommendations
Update Adobe Experience Manager to a version later than 6.5.23.
Found an issue in the description? Have something to add? Feel free to write us 👾