Vulnerability Details CVE-2026-27222
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 19.8%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-27222
-
-
cpe:2.3:a:adobe:bridge:1.0.0
-
cpe:2.3:a:adobe:bridge:1.0.3
-
cpe:2.3:a:adobe:bridge:1.0.4
-
cpe:2.3:a:adobe:bridge:10.0
-
cpe:2.3:a:adobe:bridge:10.0.1
-
cpe:2.3:a:adobe:bridge:10.0.3
-
cpe:2.3:a:adobe:bridge:11.0
-
cpe:2.3:a:adobe:bridge:11.0.1
-
cpe:2.3:a:adobe:bridge:11.1.1
-
cpe:2.3:a:adobe:bridge:11.1.2
-
cpe:2.3:a:adobe:bridge:11.1.3
-
cpe:2.3:a:adobe:bridge:12.0
-
cpe:2.3:a:adobe:bridge:12.0.1
-
cpe:2.3:a:adobe:bridge:12.0.4
-
cpe:2.3:a:adobe:bridge:13.0.0
-
cpe:2.3:a:adobe:bridge:13.0.4
-
cpe:2.3:a:adobe:bridge:13.0.7
-
cpe:2.3:a:adobe:bridge:13.0.8
-
cpe:2.3:a:adobe:bridge:13.0.9
-
cpe:2.3:a:adobe:bridge:14.0.0
-
cpe:2.3:a:adobe:bridge:14.0.3
-
cpe:2.3:a:adobe:bridge:14.0.4
-
cpe:2.3:a:adobe:bridge:14.1
-
cpe:2.3:a:adobe:bridge:14.1.1
-
cpe:2.3:a:adobe:bridge:14.1.2
-
cpe:2.3:a:adobe:bridge:14.1.3
-
cpe:2.3:a:adobe:bridge:14.1.4
-
cpe:2.3:a:adobe:bridge:14.1.6
-
cpe:2.3:a:adobe:bridge:14.1.7
-
cpe:2.3:a:adobe:bridge:14.1.8
-
cpe:2.3:a:adobe:bridge:14.1.9
-
cpe:2.3:a:adobe:bridge:15.0
-
cpe:2.3:a:adobe:bridge:15.0.3
-
cpe:2.3:a:adobe:bridge:15.0.4
-
cpe:2.3:a:adobe:bridge:15.1.1
-
cpe:2.3:a:adobe:bridge:15.1.2
-
cpe:2.3:a:adobe:bridge:15.1.3
-
cpe:2.3:a:adobe:bridge:15.1.4
-
cpe:2.3:a:adobe:bridge:16.0
-
cpe:2.3:a:adobe:bridge:16.0.1
-
cpe:2.3:a:adobe:bridge:16.0.2
-
cpe:2.3:a:adobe:bridge:2.0
-
cpe:2.3:a:adobe:bridge:2.1
-
cpe:2.3:a:adobe:bridge:3.0
-
-
cpe:2.3:o:microsoft:windows:-