Adobe Experience Manager@* Security Vulnerabilities and Issues — Adobe Experience Manager@* CVE List

Lucene search

AdobeAdobe Experience Manager*

12 matches found

CVE•added 2020/01/15 5:15 p.m.•157 views

CVE-2019-16469

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

7.5CVSS7.2AI score0.73573EPSS

CVE•added 2020/02/13 4:15 p.m.•57 views

CVE-2020-3741

Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service.

7.5CVSS7.3AI score0.02184EPSS

CVE•added 2020/01/15 5:15 p.m.•49 views

CVE-2019-16466

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01639EPSS

CVE•added 2020/03/25 8:15 p.m.•48 views

CVE-2020-3769

Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.

7.5CVSS7AI score0.01088EPSS

CVE•added 2020/06/12 2:15 p.m.•48 views

CVE-2020-9651

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.03669EPSS

CVE•added 2020/01/15 5:15 p.m.•42 views

CVE-2019-16468

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

7.5CVSS7.1AI score0.04248EPSS

CVE•added 2020/01/15 5:15 p.m.•41 views

CVE-2019-16467

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01639EPSS

CVE•added 2020/06/12 2:15 p.m.•40 views

CVE-2020-9643

Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.

7.5CVSS7AI score0.01421EPSS

CVE•added 2020/06/12 2:15 p.m.•39 views

CVE-2020-9648

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.049EPSS

CVE•added 2020/06/12 2:15 p.m.•38 views

CVE-2020-9644

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

5.4CVSS5.2AI score0.02761EPSS

CVE•added 2020/06/12 2:15 p.m.•38 views

CVE-2020-9645

Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.

7.5CVSS7AI score0.0105EPSS

CVE•added 2020/06/12 2:15 p.m.•36 views

CVE-2020-9647

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.049EPSS