December 10, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Multiple IBM Db2 Vulnerabilities
November 10, 2025Threat Actors Target Outlook and Google, Outsmarting Conventional Email Security
November 11, 2025Multiple IBM Db2 Vulnerabilities
November 10, 2025Threat Actors Target Outlook and Google, Outsmarting Conventional Email Security
November 11, 2025
Severity
Medium
Analysis Summary
CVE-2025-61796 CVSS:5.4
Adobe Experience Manager Screens is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability using a specially crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
CVE-2025-54267 CVSS:6.5
Adobe Commerce and Magento Open Source could allow a remote attacker to gain elevated privileges on the system, caused by an incorrect authorization error. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to gain privileges on the system.
Impact
- Privilege Escalation
- Cross-site Scripting
Indicators of Compromise
CVE
CVE-2025-61796
CVE-2025-54267
Affected Vendors
- Adobe
Affected Products
- Adobe Commerce 2.4.4-p15
- Adobe Commerce B2B 1.3.3-p15
- Adobe Experience Manager Screens 6.5.22 Screens FP11.6
Remediation
Refer to Adobe Security Advisory for patch, upgrade, or suggested workaround information.