CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.13)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2025-64565
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64564
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64563
Medium

A DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.23 and earlier. A low-privileged attacker can exploit it to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64559
Medium

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse the page containing the vulnerable field.

CVE-2025-64558
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

CVE-2025-64557
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.

CVE-2025-64556
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64555
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64554
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64553
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64551
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker could exploit it to execute malicious scripts in the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL.

CVE-2025-64550
Medium

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64549
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64548
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64547
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64546
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

CVE-2025-64545
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can exploit it to execute malicious scripts in the context of the victim's browser, but it requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64544
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can execute malicious scripts in the context of the victim's browser, but exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64543
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can execute malicious scripts in the context of the victim's browser, but exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.

CVE-2025-64541
Medium

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in the victim's browser when the page is viewed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS