Vulnerabilities

TI-2026-26871 CVE-2026-34625 · GHSA-33v2-523j-4qw6

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

LOW 24

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00157 Published 2026-04-14 Fixed in 11.8 CWE-79

TI-2026-26869 CVE-2026-34623 · GHSA-h8h2-q324-9vvx

LOW 24

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00157 Published 2026-04-14 Fixed in 11.8 CWE-79

TI-2026-26870 CVE-2026-34624 · GHSA-rwx7-xw8j-g7cp

LOW 24

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00157 Published 2026-04-14 Fixed in 11.8 CWE-79

TI-2026-21715 CVE-2026-27288 · GHSA-m4p2-m73g-c9h4

LOW 24

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00189 Published 2026-04-14 Fixed in 11.8 CWE-79