CVE-2026-48383

Adobe Experience Manager is impacted by an Incorrect Authorization vulnerability (CWE-863). This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over a victim's account or session. The vulnerabi...

CVE-2026-48382 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-48382

Adobe Experience Manager is affected by an Incorrect Authorization (CWE-863) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over the victim's account or session. Exploitatio...

CVE-2026-110084 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

Adobe Experience Manager is affected by an XML Injection aka Blind XPath Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitatio...

CVE-2026-110084

Adobe Experience Manager is affected by an XML Injection (Blind XPath Injection) vulnerability (CWE-91). A low-privileged attacker can exploit this flaw to bypass security features and gain unauthorized read and limited write access . This vulnerability does not require any user interaction for e...

CVE-2026-110083 Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized...

CVE-2026-110083

Adobe Experience Manager is impacted by an SQL Injection vulnerability (CWE-89 ) caused by the improper neutralization of special elements used in an SQL command. A low-privileged attacker could exploit this issue without user interaction to bypass security measures, potentially gaining unauthori...

CVE-2026-110082

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can execute malicious JavaScript within a victim's browser by tricking them into visiting a URL referencing a vulnerable page. The vulnerability has a MEDIUM base sever...

CVE-2026-110081 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

CVE-2026-110081

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields , which may then execute in a victim's browser when they navigate to the affected page. No specific versions, expl...

CVE-2026-110080 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-110080

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the victim's browser context. Successful exploitation requires user interaction , s...

CVE-2026-110079 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-110079

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by manipulating the DOM environment to execute malicious JavaScript within a victim's browser. Successful exploitation requires user interaction , specifically when ...

CVE-2026-110078 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-110078

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Successful exploitation requires user interacti...

CVE-2026-110077

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79 ). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of a victim's browser. Exploitation requires user interaction , specifi...

CVE-2026-110076 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-110076

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this issue by manipulating the DOM environment to execute malicious JavaScript within a victim's browser. Successful exploitation requires user interaction , specifically...

CVE-2026-110075 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...