CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability (CWE-863). This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over the victim's account or session. The vulnera...

CVE-2026-90531

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference (XXE) (CWE-611) vulnerability. A low-privileged attacker can exploit this flaw to achieve privilege escalation and gain elevated access to internal resources without requiring user interaction. No spe...

CVE-2026-83960

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specif...

CVE-2026-83958

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specif...

CVE-2026-83662

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker could exploit this issue to inject malicious scripts into a web page, potentially leading to elevated access or control over the victim's account or session . Successful exploitatio...

CVE-2026-75732

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability (CWE-863 ). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user, potentially leading to elevated access or control over the victim's account or session. Exploi...

CVE-2026-48398

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-48383

Adobe Experience Manager is impacted by an Incorrect Authorization vulnerability (CWE-863). This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over a victim's account or session. The vulnerabi...

CVE-2026-48382

Adobe Experience Manager is affected by an Incorrect Authorization (CWE-863) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over the victim's account or session. Exploitatio...

CVE-2026-110084

Adobe Experience Manager is affected by an XML Injection (Blind XPath Injection) vulnerability (CWE-91). A low-privileged attacker can exploit this flaw to bypass security features and gain unauthorized read and limited write access . This vulnerability does not require any user interaction for e...

CVE-2026-110083

Adobe Experience Manager is impacted by an SQL Injection vulnerability (CWE-89 ) caused by the improper neutralization of special elements used in an SQL command. A low-privileged attacker could exploit this issue without user interaction to bypass security measures, potentially gaining unauthori...

CVE-2026-110082

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can execute malicious JavaScript within a victim's browser by tricking them into visiting a URL referencing a vulnerable page. The vulnerability has a MEDIUM base sever...

CVE-2026-110081

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields , which may then execute in a victim's browser when they navigate to the affected page. No specific versions, expl...

CVE-2026-110080

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Successful exploitation requires user interaction , s...

CVE-2026-110079

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within a victim's browser. Successful exploitation requires user interaction , specifically when ...

CVE-2026-110078

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-110077

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specifi...

CVE-2026-110076

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within a victim's browser. Successful exploitation requires user interaction , specifically...

CVE-2026-110075

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within a victim's browser context. Successful exploitation requires user interaction , specifica...

CVE-2026-110074

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...