VDB

GCVE-110-NCSC-2026-363

GCVE-110-NCSC-2026-363
Advisory PublishedCVSS 3.5/10
Vulnetix · Advisory published September 9, 2026
Adobe Experience Manager contains a DOM-based Cross-Site Scripting (XSS) vulnerability that enables attackers to execute malicious JavaScript in a victim's browser through user interaction on a crafted webpage, altering the script execution scope.

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-863Incorrect AuthorizationCWE-369Divide By ZeroCWE-122Heap-based Buffer OverflowCWE-787Out-of-bounds Write

Risk Scores

CVSS 3.1
3.5/10
Low · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersionsPlatforms
Adobevers:unknown/*

Aliases

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

495 records in the GCVE database · Updated September 10, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›