PT-2025-25092 · Adobe · Experience Manager

Published

2025-06-10

·

Updated

2025-06-10

·

CVE-2025-47021

CVSS v2.0

5.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.22 and earlier
Description A stored Cross-Site Scripting (XSS) issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses to the page containing the vulnerable field, malicious JavaScript may be executed in their browser.
Recommendations For Adobe Experience Manager versions 6.5.22 and earlier, consider disabling the vulnerable form fields until a patch is available. Restrict access to these fields to minimize the risk of exploitation. Avoid using the vulnerable fields in the affected forms until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-07603
BDU:2025-07604
BDU:2025-07605
BDU:2025-07606
BDU:2025-07607
BDU:2025-07608
BDU:2025-07609
BDU:2025-07610
BDU:2025-07611
BDU:2025-07612
BDU:2025-07613
BDU:2025-07614
BDU:2025-07615
BDU:2025-07616
CVE-2025-47021

Affected Products

Experience Manager