Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-47115

What is CVE-2025-47115?

Adobe Experience Manager versions 6.5.22 and earlier are vulnerable to a stored Cross-Site Scripting (XSS) flaw. This vulnerability allows an attacker with limited privileges to inject harmful scripts into the application’s form fields. When users interact with these compromised fields, malicious JavaScript can execute in their browsers, potentially leading to data theft or session hijacking. Organizations using these affected versions should take immediate measures to patch the vulnerability to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References