p PatchFirst

CVE-2026-83960

CVE-2026-83960 · Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

CVSS 5.4 · Moyenne · EPSS 0,2% · Correctif disponible

Publication
Mise à jour

Produits et versions concernés

  • adobe experience manager as a cloud service

    Versions du logiciel
    • ≥ 0, ≤ 2026.9.28187: Concernée (custom)
    • 2026.9.28386: Non concernée (custom)

    Mettez à jour vers 2026.9.28386

  • adobe experience manager 6.5 lts

    Versions du logiciel
    • ≥ 0, ≤ 6.5 LTS SP3: Concernée (custom)
    • 6.5 LTS SP3 - Hotfix for SITES-49893 + SITES-49334 + SITES-48208: Non concernée (custom)

    Mettez à jour vers 6.5 LTS SP3 - Hotfix for SITES-49893 + SITES-49334 + SITES-48208

  • adobe experience manager 6.5

    Versions du logiciel
    • ≥ 0, ≤ 6.5.25: Concernée (custom)
    • 6.5.25 - Hotfix for SITES-49894 + SITES-49335 + SITES-48207: Non concernée (custom)

    Mettez à jour vers 6.5.25 - Hotfix for SITES-49894 + SITES-49335 + SITES-48207

Sources originales

Vérifiez votre serveur →