Threats Tagged 'cve-2026-75643'

Adobe Experience Manager as a Cloud Service is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2026-75643). This vulnerability allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which may execute in the browsers of users who visit the affected pages. The vulnerability impacts confidentiality and integrity but does not affect availability. The CVSS score is 5.4, indicating a medium severity level. No specific patch or remediation details are provided, and no known exploits are reported in the wild. The affected versions include those up to and including 2026.7.0, SP2, and 6.5.24. The vendor has not provided explicit patch or mitigation guidance in the input data.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.