CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-75695
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75694
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75693
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75692
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75691
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75690
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75687
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75685
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75683
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75681
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75680
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75679
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75678
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75677
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75675
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75674
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75672
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. This requires user interaction, as the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75671
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75670
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

CVE-2026-75669
Medium

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser. Exploitation requires user interaction – the victim must visit a crafted webpage. The scope is changed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS