Skip to content
OpenAdvisories

Product · Adobe

Adobe Experience Manager

928 known vulnerabilities.

928 results · Feed

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to inject and execute arbitrary JavaScript code within the context of the user's browser sess…

  • Medium 4.8

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Low 3.5

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect th…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Low 3.5

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploita…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. …

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploita…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victi…

  • Medium 5.4

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed w…