CVE-2025-64560: Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64560?
CVE-2025-64560 is considered a medium severity vulnerability due to its potential for exploitation through Cross-Site Scripting.
How can I mitigate the risks associated with CVE-2025-64560?
To mitigate CVE-2025-64560, upgrade Adobe Experience Manager to version 6.5.24 or later.
What types of attacks can CVE-2025-64560 facilitate?
CVE-2025-64560 can facilitate DOM-based Cross-Site Scripting attacks, allowing attackers to execute malicious scripts in a victim's browser.
Who is impacted by CVE-2025-64560?
CVE-2025-64560 impacts users of Adobe Experience Manager versions 6.5.23 and earlier.
Is user interaction required to exploit CVE-2025-64560?
Yes, exploitation of CVE-2025-64560 requires some form of user interaction, such as clicking a malicious link.