CVE-2025-64613: falha de média gravidade em Adobe Experience Manager
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.2%
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Adobe · Adobe Experience ManagerCVEs relacionadas — Adobe Experience Manager
No mesmo produto, das mais perigosas para as menos.
CVE-2025-54253CRITICALAdobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 88.8%KEVCVE-2025-54254HIGHAdobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)EPSS 70.1%CVE-2019-8086—CVE-2019-8086EPSS 22.5%CVE-2019-16469—CVE-2019-16469EPSS 17.2%CVE-2019-7964—CVE-2019-7964EPSS 10.2%CVE-2025-54248HIGHAdobe Experience Manager | Improper Input Validation (CWE-20)EPSS 6.5%