Cross-Site Scripting Vulnerability in Adobe Experience Manager
CVE-2026-48253

5.4MEDIUM

Key Information:

Vendor: Adobe
Status: Adobe Experience Manager As A Cloud Service; Adobe Experience Manager 6.5 Lts; Adobe Experience Manager 6.5
Vendor: CVE Published:; 14 July 2026

What is CVE-2026-48253?

Adobe Experience Manager has a vulnerability that allows for DOM-based Cross-Site Scripting (XSS) attacks. An attacker can exploit this flaw to run malicious JavaScript in a user's browser by manipulating the DOM environment. The successful execution of this attack necessitates that the user visits a specially crafted webpage, putting their sensitive data at risk.

Affected Version(s)

Adobe Experience Manager 6.5 0 <= 6.5.25

Adobe Experience Manager 6.5 LTS 0

References

https://helpx.adobe.com/security/products/experience-mana...

vendor-advisory

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 14, 2026
Vulnerability Reserved
May 21, 2026

CVE-2026-48253 Data

JSON