CVE-2026-47991

Katalog CVE

CVSS 6.1 · Medium EPSS 0,46%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada adobe experience manager. Skor CVSS 3.1 6.1 (Medium) menurut adobe.com.

Deskripsi (NVD)

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.

Rincian

Terbit di NVD

9 Juni 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber adobe.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 37,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/experience-manager/apsb26-56.html advisory vendor