DOM-based XSS Vulnerability in Adobe Experience Manager
CVE-2026-110075
5.4MEDIUM
What is CVE-2026-110075?
Adobe Experience Manager contains a DOM-based Cross-Site Scripting (XSS) vulnerability that allows attackers to exploit the DOM environment. By manipulating the DOM, an attacker can execute malicious JavaScript within the browser context of users. This exploitation necessitates user interaction, as victims must navigate to a specifically crafted webpage to trigger the attack. Given the potential for malicious activity, it is crucial for users and administrators to remain vigilant and implement security best practices.
Affected Version(s)
Adobe Experience Manager 6.5 0 <= 6.5.25
Adobe Experience Manager 6.5 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052, 6.5.25 - Hotfix for GRANITE-75052