Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions from 0 up to and including 6.5.25. The vulnerability has a medium severity with a CVSS score of 5.4.
Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The CVSS 3.1 base score is 5.4, indicating medium severity.
Adobe Experience Manager 6.5 LTS is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the context of a victim's browser. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity with a medium severity rating.
Adobe Experience Manager 6.5 contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim visits a page with the injected content, the malicious JavaScript executes in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.
Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows low-privileged attackers to inject malicious scripts into vulnerable form fields. When a victim visits a page containing the injected script, the malicious JavaScript may execute in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.
Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into form fields. When a victim visits a page with the vulnerable field, the malicious JavaScript may execute in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.
Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The issue changes the security scope and has a medium severity rating with a CVSS score of 5.4.
Adobe Experience Manager 6.5 contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into form fields. When a victim views the affected page, the injected JavaScript may execute in their browser. This vulnerability affects versions from 0 up to and including 6.5.25. The issue has a medium severity rating with a CVSS score of 5.4.
Adobe Experience Manager 6.5 LTS contains a path traversal vulnerability (CWE-22) that allows a low-privileged attacker to write files to unauthorized locations on the file system without user interaction. This vulnerability changes the security scope and can lead to arbitrary file system writes.
Adobe Experience Manager 6.5 LTS is affected by a stored Cross-Site Scripting (XSS) vulnerability that allows low-privileged attackers to inject malicious scripts into vulnerable form fields. When a victim visits a page containing such a field, the malicious JavaScript may execute in their browser. This vulnerability has a medium severity rating with a CVSS score of 5.4. The scope of the vulnerability is changed, indicating impact beyond the initially vulnerable component.
Adobe Experience Manager 6.5 LTS is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity but not availability. The CVSS score is 5.4, indicating a medium severity level.
Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim accesses the affected page, the malicious JavaScript may execute in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.
Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into vulnerable form fields. When a victim accesses a page with such a field, the malicious script may execute in their browser, potentially leading to elevated access or control over the victim's account or session. This vulnerability has a critical severity rating with a CVSS score of 9.3.
Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into vulnerable form fields. When a victim accesses a page with the injected script, the malicious JavaScript executes in their browser, potentially enabling attackers to gain elevated access or control over the victim's account or session. This vulnerability has a critical severity rating with a CVSS score of 9.3.
Adobe Experience Manager 6.5 LTS is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity but does not affect availability. The scope of the vulnerability is changed, indicating that the impact crosses security boundaries.
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects versions up to 18.0.0.206 and 17.0.9.866. The issue has a high severity rating with a CVSS score of 7.8.
Adobe FrameMaker 2026 contains an out-of-bounds read vulnerability (CWE-125) that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 5.5, indicating a medium severity. There is no information about an available patch or vendor advisory confirming remediation status.