PT-2025-24985 · Adobe · Experience Manager

CVE-2025-46892 · Publicado 2025-06-10 · Atualizado 2025-06-10

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.22 and earlier

Description A stored Cross-Site Scripting (XSS) issue affects the software, allowing an attacker with limited privileges to inject malicious scripts into vulnerable form fields. This could lead to the execution of malicious JavaScript in a victim's browser when accessing the page containing the vulnerable field.

Recommendations For Adobe Experience Manager versions 6.5.22 and earlier, update to a version that includes a fix for this issue to prevent malicious script injection. As a temporary workaround, consider restricting access to vulnerable form fields until a patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-07106

CVE-2025-46892

Produtos afetados

Experience Manager

Referências · 4

• https://bdu.fstec.ru/vul/2025-07106 · Nota de Segurança
• https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-46892 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-46892 · Aviso do Fabricante