DOM-based Cross-Site Scripting Vulnerability in Adobe Experience Manager
CVE-2026-75694

5.4MEDIUM

Key Information:

Vendor: Adobe
Status: Adobe Experience Manager As A Cloud Service; Adobe Experience Manager 6.5 Lts; Adobe Experience Manager 6.5
Vendor: CVE Published:; 8 September 2026

What is CVE-2026-75694?

Adobe Experience Manager is impacted by a DOM-based Cross-Site Scripting (XSS) vulnerability that can enable attackers to craft malicious JavaScript. This exploitation occurs when users interact with the compromised DOM environment, necessitating their visit to a malicious webpage. Effective mitigation strategies should be applied to protect users and maintain application integrity.

Affected Version(s)

Adobe Experience Manager 6.5 0 <= 6.5.24

Adobe Experience Manager 6.5 LTS 0

Adobe Experience Manager as a Cloud Service 0 <= 2026.7.0

References

https://helpx.adobe.com/security/products/experience-mana...

vendor-advisory

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 8, 2026
Vulnerability Reserved
Aug 18, 2026

CVE-2026-75694 Data

JSON