CVE-2025-64562: Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64562?
CVE-2025-64562 is considered a medium severity vulnerability due to its potential for exploitation by low privileged attackers.
How do I fix CVE-2025-64562?
To fix CVE-2025-64562, users should update Adobe Experience Manager to version 6.5.24 or later.
Who is affected by CVE-2025-64562?
CVE-2025-64562 affects Adobe Experience Manager versions 6.5.23 and earlier.
What kind of vulnerability is CVE-2025-64562?
CVE-2025-64562 is a DOM-based Cross-Site Scripting (XSS) vulnerability.
What are the potential consequences of exploiting CVE-2025-64562?
Exploitation of CVE-2025-64562 could allow an attacker to execute malicious scripts in the context of the victim's browser.