Skip to content
OpenAdvisories

Product · Adobe

Adobe Experience Manager

928 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

928 results · Feed

  • Medium 5.4
    CVE-2023-48506

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48582

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48494

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48492

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48606

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48615

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48523

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Medium 4.3
    CVE-2023-48599

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-48485

    Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-38215

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-38214

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-29304

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content …

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-29322

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content …

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-29302

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content …

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-21615

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may b…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2023-21616

    Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

    Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may b…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-9651

    Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful exp…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-9647

    Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exp…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-9644

    Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploi…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-9648

    Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation co…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-9643

    Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful e…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-9645

    Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Succes…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-3769

    Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful e…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2020-3741

    Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful expl…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-16467

    Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability.…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-16468

    Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Succ…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-16469 Scanner template EPSS 17%

    Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability.…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-16466

    Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability.…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8234

    Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploita…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8088

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8087

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful …

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8086 Scanner template EPSS 23%

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful …

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8085

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8084

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8083

    Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation c…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8082

    Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful explo…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8081

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Successful exploit…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8080

    Adobe Experience Manager versions 6.4 and 6.3 have a stored cross site scripting vulnerability. Successful exploitation…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8079

    Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross site scripting vulnerability. Success…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2019-8078

    Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful expl…

    Adobe Adobe Experience Manager