CVE-2026-47985

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A DOM-based Cross-Site Scripting (XSS) issue exists where the system fails to protect the web page structure. This allows a remote attacker to manipulate the Document Object Model (DOM) environment to execute arbitrary malicious JavaScript code within the context of a victim's browser. Exploitation requires user interaction, specifically requiring the victim to visit a specially crafted webpage.

Recommendations Update Adobe Experience Manager to a version later than 6.5.24, LTS SP1, and 2026.04.