Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:experience_manager:6.5.22.0:fp11.6:*:*:-:*:*:*

part: a version: 6.5.22.0 update: fp11.6

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductExperience Manager (4312bd60-0d9f-5443-9cf9-eaaabd81f028)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-61797 vulnerable 2026-06-08 07:37:28.080066 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link. Scope is changed.
Published: 2025-10-14T21:18:13.536Z
Updated: 2025-10-15T20:27:06.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61796 vulnerable 2026-06-08 07:37:28.079435 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link. Scope is changed.
Published: 2025-10-14T21:18:11.839Z
Updated: 2025-10-15T20:33:12.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54272 vulnerable 2026-06-08 07:33:12.289239 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must open a malicious link. Scope is changed.
Published: 2025-10-14T21:18:12.690Z
Updated: 2025-10-15T20:32:14.352Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.