WID-SEC-2025-0752 — Adobe Experience Manager: Schwachstelle ermöglicht Cross-Site Scripting

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Adobe Experience Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 1

Medium 5.4

CVE-2025-27205

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager Screens versions FP11.3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may …

Adobe Adobe Experience Manager

Apr 8, 2025

Revision history

2025-04-08 #1
Initiale Fassung

References

Adobe Security Bulletin APSB25-32 vom 2025-04-08
https://helpx.adobe.com/security/products/aem-screens/apsb25-32.html
CVE-2025-27205
https://nvd.nist.gov/vuln/detail/CVE-2025-27205