CVE-2026-34623 — Vulnetix

CVE-2026-34623 PUBLISHED CVSS 5.400000095367432 MEDIUM

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a specially crafted web page.

Risk Scores

CVSS v3.1

5.400000095367432

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
Adobe	Adobe Experience Manager	0

Timeline

Apr 14, 2026 CVE Published
Apr 14, 2026 CVE Updated
Apr 14, 2026 PoC Published
Apr 15, 2026 Security Advisory

References

https://helpx.adobe.com/security/products/aem-screens/apsb26-34.html vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-34623 advisory

Open in Interactive Console →