CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.08)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2025-64861
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

CVE-2025-64858
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

CVE-2025-64857
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64853
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64852
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64850
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64847
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64845
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64841
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64840
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64839
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64833
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. When a victim visits the page containing the field, malicious JavaScript may execute in their browser.

CVE-2025-64829
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64827
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64826
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

CVE-2025-64825
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

CVE-2025-64823
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

CVE-2025-64822
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

CVE-2025-64821
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

CVE-2025-64820
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS