5.4Mittel

CVE-2026-123341Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service Veröffentlicht: (vor 3 Tagen)

Beschreibung

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.

Schwachstellentyp (CWE): CWE-79

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Adobe Adobe Experience Manager as a Cloud Service < 2026.10.28871, fixed 2026.10.28871

Referenzen und Patches