Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 10 Nov 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed. | |
| Title | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) | |
| Weaknesses | CWE-79 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2026-11-10T21:56:52.730Z
Reserved: 2026-11-05T18:55:26.379Z
Link: CVE-2026-123341
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-10T22:18:29.953
Modified: 2026-11-10T22:18:29.953
Link: CVE-2026-123341
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses