5.4Media
CVE-2026-118478Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Descripción
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Debilidad (CWE):
CWE-79
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Adobe | Adobe Experience Manager 6.5 | ≤ 6.5.25, fixed 6.5.25 - Cumulative Hotfix for GRANITE-75398 | |
| Adobe | Adobe Experience Manager 6.5 LTS | ≤ 6.5 LTS SP3, fixed 6.5 LTS SP3 - Cumulative Hotfix for GRANITE-75398 | |
| Adobe | Adobe Experience Manager as a Cloud Service | ≤ 2026.10.29023, fixed 2026.10.29251 |