Skip to content
OpenAdvisories

Product · Adobe

Experience Manager

102 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-40722

    AEM Forms Improper Restriction of XML External Entity Reference

    AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE.

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-24445

    Cross-site Scripting Vulnerability in Commenting Function of Adobe Experience Manager (AEM)

    AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be ex…

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9734

    Stored XSS in AEM Forms component

    The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.1 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be e…

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9742

    Reflected XSS in AEM Inbox module

    AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below) and 6.3.3.8 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Inbox calendar feature. These scripts …

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9741

    Stored XSS in AEM Forms Components

    The AEM forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be e…

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9732

    Stored XSS in AEM Sites Components

    The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be …

    Adobe Experience Manager
  • Critical 9.0
    CVE-2020-9740

    Stored XSS in AEM Design Importer Component

    AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Impo…

    Adobe Experience Manager