Threat Intelligence Database

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability has a medium severity with a CVSS score of 5.4.

Adobe Experience Manager as a Cloud Service is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-83662). This vulnerability allows an attacker to inject malicious scripts into web pages, potentially leading to elevated access or control over a victim's account or session. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a compromised page. The vulnerability has a critical severity with a CVSS score of 9.3.

CVE-2026-48383 is an incorrect authorization vulnerability in Adobe Experience Manager as a Cloud Service. It allows arbitrary code execution in the context of the current user without requiring user interaction. This can lead to elevated access or control over the victim's account or session. The vulnerability has a critical severity with a CVSS score of 10. No patch or remediation information is provided. The affected versions include 0, all versions up to and including 2026.9.28187, and up to and including 6.5.25.

Adobe Experience Manager as a Cloud Service is affected by an Incorrect Authorization vulnerability (CWE-863) that allows arbitrary code execution in the context of the current user without requiring user interaction. This vulnerability can lead to elevated access or control over the victim's account or session. The vulnerability has a critical severity with a CVSS score of 10. No specific patch or remediation details are provided in the input data.

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.