CVE-2025-64887: falha de média gravidade em Adobe Experience Manager
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.2%
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Adobe · Adobe Experience ManagerCVEs relacionadas — Adobe Experience Manager
No mesmo produto, das mais perigosas para as menos.
CVE-2025-54253CRITICALAdobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 80.8%KEVCVE-2025-54254HIGHAdobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)EPSS 53.9%CVE-2019-8086—CVE-2019-8086EPSS 22.5%CVE-2019-16469—CVE-2019-16469EPSS 17.2%CVE-2019-7964—CVE-2019-7964EPSS 10.2%CVE-2025-54248HIGHAdobe Experience Manager | Improper Input Validation (CWE-20)EPSS 7.0%