CVE-2026-34623: Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a specially crafted web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34623?
CVE-2026-34623 is classified as a high severity vulnerability due to its potential to allow cross-site scripting exploits.
How do I fix CVE-2026-34623?
To fix CVE-2026-34623, upgrade Adobe Experience Manager to version 6.5.25 or later, which includes a patch for this vulnerability.
What versions of Adobe Experience Manager are affected by CVE-2026-34623?
CVE-2026-34623 affects Adobe Experience Manager versions 6.5.24 and FP11.7 and earlier.
What are the risks associated with CVE-2026-34623?
The risk associated with CVE-2026-34623 includes the potential for attackers to execute malicious JavaScript code in the context of a user's session.
Is there a workaround for CVE-2026-34623 if I cannot upgrade?
Currently, there are no recommended workarounds for CVE-2026-34623, so upgrading to a patched version is essential.