DOM-Based XSS Vulnerability in Adobe Experience Manager

CVE-2025-64539

What is CVE-2025-64539?

Adobe Experience Manager versions 6.5.23 and earlier are vulnerable to a DOM-based Cross-Site Scripting (XSS) flaw. This vulnerability allows an attacker to inject harmful scripts into a web page, leading to potential arbitrary code execution in the browser of the affected user. A successful exploitation of this vulnerability necessitates user interaction; victims must navigate to a malicious page crafted by the adversary. Once exploited, the impacts can extend to session takeovers, significantly compromising the confidentiality and integrity of user data.

References