Adobe Experience Manager Security Vulnerabilities and Issues — Adobe Experience Manager CVE List

Lucene search

AdobeAdobe Experience Manager

32 matches found

CVE•added 2019/10/24 6:15 p.m.•95 views

CVE-2019-8080

Adobe Experience Manager versions 6.4 and 6.3 have a stored cross site scripting vulnerability. Successful exploitation could lead to privilege escalation.

6.1CVSS5.8AI score0.01012EPSS

CVE•added 2019/10/24 6:15 p.m.•94 views

CVE-2019-8078

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.0126EPSS

CVE•added 2019/10/24 6:15 p.m.•93 views

CVE-2019-8079

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2019/10/25 4:15 p.m.•71 views

CVE-2019-8085

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2019/10/25 4:15 p.m.•58 views

CVE-2019-8234

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.5CVSS5.9AI score0.0141EPSS

CVE•added 2024/12/10 10:15 p.m.•51 views

CVE-2024-43729

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a high impact on integrity. Exploitation of t...

6.5CVSS7AI score0.00081EPSS

CVE•added 2020/01/15 5:15 p.m.•49 views

CVE-2019-16466

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01639EPSS

CVE•added 2020/06/12 2:15 p.m.•48 views

CVE-2020-9651

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.03669EPSS

CVE•added 2018/10/17 6:29 p.m.•46 views

CVE-2018-15971

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2017/12/09 6:29 a.m.•45 views

CVE-2017-11296

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager.

6.1CVSS5.9AI score0.01471EPSS

CVE•added 2017/12/09 6:29 a.m.•44 views

CVE-2017-3109

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet.

6.1CVSS5.9AI score0.01471EPSS

CVE•added 2019/01/28 6:29 p.m.•44 views

CVE-2018-19726

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2024/06/13 8:16 a.m.•44 views

CVE-2024-36216

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the v...

6.1CVSS5.5AI score0.01811EPSS

CVE•added 2016/12/15 6:59 a.m.•43 views

CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks.

6.1CVSS6AI score0.01316EPSS

CVE•added 2018/10/17 6:29 p.m.•43 views

CVE-2018-15973

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01011EPSS

CVE•added 2018/02/27 5:29 a.m.•43 views

CVE-2018-4875

Adobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting vulnerability related to the handling of malicious content embedded in image files uploaded to the DAM.

6.1CVSS5.9AI score0.00941EPSS

CVE•added 2019/10/25 3:15 p.m.•43 views

CVE-2019-8084

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2019/01/28 6:29 p.m.•41 views

CVE-2018-19727

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2018/09/06 7:29 p.m.•41 views

CVE-2018-5005

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01651EPSS

CVE•added 2020/01/15 5:15 p.m.•41 views

CVE-2019-16467

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01639EPSS

CVE•added 2025/06/10 11:15 p.m.•41 views

CVE-2025-47094

Adobe Experience Manager versions 6.5.22 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

6.1CVSS5.8AI score0.00084EPSS

CVE•added 2018/02/27 5:29 a.m.•40 views

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

6.1CVSS5.9AI score0.00441EPSS

CVE•added 2018/08/29 1:29 p.m.•39 views

CVE-2018-12806

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01651EPSS

CVE•added 2020/06/12 2:15 p.m.•38 views

CVE-2020-9648

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.049EPSS

CVE•added 2016/12/15 6:59 a.m.•37 views

CVE-2016-7882

Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks.

6.1CVSS5.9AI score0.01252EPSS

CVE•added 2019/10/25 3:15 p.m.•37 views

CVE-2019-8083

Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2020/06/12 2:15 p.m.•36 views

CVE-2020-9647

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.049EPSS

CVE•added 2018/10/17 6:29 p.m.•35 views

CVE-2018-15970

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2018/10/17 6:29 p.m.•35 views

CVE-2018-15972

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.00982EPSS

CVE•added 2018/10/17 6:29 p.m.•33 views

CVE-2018-15969

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2025/06/10 11:15 p.m.•33 views

CVE-2025-47049

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue ...

6.1CVSS5.8AI score0.00084EPSS

CVE•added 2016/12/15 6:59 a.m.•32 views

CVE-2016-7884

Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks.

6.1CVSS5.9AI score0.01316EPSS