Experience Manager Security Vulnerabilities and Issues — Experience Manager CVE List

Lucene search

AdobeExperience Manager

55 matches found

CVE•added 2019/07/18 10:15 p.m.•104 views

CVE-2019-7955

Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.

6.1CVSS5.8AI score0.00934EPSS

CVE•added 2016/12/15 6:59 a.m.•97 views

CVE-2016-6933

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.

6.1CVSS5.9AI score0.01191EPSS

CVE•added 2019/10/24 6:15 p.m.•95 views

CVE-2019-8080

Adobe Experience Manager versions 6.4 and 6.3 have a stored cross site scripting vulnerability. Successful exploitation could lead to privilege escalation.

6.1CVSS5.8AI score0.01012EPSS

CVE•added 2019/10/24 6:15 p.m.•94 views

CVE-2019-8078

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.0126EPSS

CVE•added 2019/10/24 6:15 p.m.•93 views

CVE-2019-8079

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2019/07/18 10:15 p.m.•88 views

CVE-2019-7954

Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.

6.1CVSS5.8AI score0.01182EPSS

CVE•added 2019/07/18 10:15 p.m.•82 views

CVE-2019-7953

Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.

6.5CVSS6.2AI score0.01117EPSS

CVE•added 2021/02/02 11:15 p.m.•79 views

CVE-2021-21043

ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content...

6.1CVSS5.9AI score0.00985EPSS

CVE•added 2019/10/25 4:15 p.m.•71 views

CVE-2019-8085

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2021/08/24 6:15 p.m.•60 views

CVE-2021-28628

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser ...

6.3CVSS6AI score0.01187EPSS

CVE•added 2019/10/25 4:15 p.m.•58 views

CVE-2019-8234

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.5CVSS5.9AI score0.0141EPSS

CVE•added 2021/08/24 6:15 p.m.•55 views

CVE-2021-28625

6.3CVSS6AI score0.01187EPSS

CVE•added 2022/01/13 9:15 p.m.•55 views

CVE-2021-43762

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vulnerability.

6.5CVSS6.7AI score0.00617EPSS

CVE•added 2018/05/19 5:29 p.m.•51 views

CVE-2018-4930

Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.7AI score0.0102EPSS

CVE•added 2024/12/10 10:15 p.m.•51 views

CVE-2024-43729

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a high impact on integrity. Exploitation of t...

6.5CVSS7AI score0.00081EPSS

CVE•added 2021/09/27 4:15 p.m.•50 views

CVE-2021-40712

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to achieve server-side denial of service.

6.5CVSS6.2AI score0.00392EPSS

CVE•added 2020/01/15 5:15 p.m.•49 views

CVE-2019-16466

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01639EPSS

CVE•added 2020/06/12 2:15 p.m.•48 views

CVE-2020-9651

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.03669EPSS

CVE•added 2021/09/27 4:15 p.m.•48 views

CVE-2021-40714

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the accesskey parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the c...

6.1CVSS5.7AI score0.00882EPSS

CVE•added 2022/01/13 9:15 p.m.•47 views

CVE-2021-44178

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may b...

6.1CVSS5.6AI score0.02816EPSS

CVE•added 2018/10/17 6:29 p.m.•46 views

CVE-2018-15971

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2017/12/09 6:29 a.m.•45 views

CVE-2017-11296

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager.

6.1CVSS5.9AI score0.01471EPSS

CVE•added 2019/01/28 6:29 p.m.•45 views

CVE-2018-19724

Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2017/12/09 6:29 a.m.•44 views

CVE-2017-3109

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet.

6.1CVSS5.9AI score0.01471EPSS

CVE•added 2019/01/28 6:29 p.m.•44 views

CVE-2018-19726

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2024/06/13 8:16 a.m.•44 views

CVE-2024-36216

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the v...

6.1CVSS5.5AI score0.01811EPSS

CVE•added 2016/12/15 6:59 a.m.•43 views

CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks.

6.1CVSS6AI score0.01316EPSS

CVE•added 2018/10/17 6:29 p.m.•43 views

CVE-2018-15973

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01011EPSS

CVE•added 2018/02/27 5:29 a.m.•43 views

CVE-2018-4875

Adobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting vulnerability related to the handling of malicious content embedded in image files uploaded to the DAM.

6.1CVSS5.9AI score0.00941EPSS

CVE•added 2019/10/25 3:15 p.m.•43 views

CVE-2019-8084

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2019/01/28 6:29 p.m.•41 views

CVE-2018-19727

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2018/09/06 7:29 p.m.•41 views

CVE-2018-5005

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01651EPSS

CVE•added 2020/01/15 5:15 p.m.•41 views

CVE-2019-16467

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01639EPSS

CVE•added 2025/06/10 11:15 p.m.•41 views

CVE-2025-47094

Adobe Experience Manager versions 6.5.22 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

6.1CVSS5.8AI score0.00084EPSS

CVE•added 2018/02/27 5:29 a.m.•40 views

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

6.1CVSS5.9AI score0.00441EPSS

CVE•added 2018/05/19 5:29 p.m.•40 views

CVE-2018-4931

Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.0102EPSS

CVE•added 2018/08/29 1:29 p.m.•39 views

CVE-2018-12806

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01651EPSS

CVE•added 2018/05/19 5:29 p.m.•39 views

CVE-2018-4929

Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.0102EPSS

CVE•added 2020/06/12 2:15 p.m.•38 views

CVE-2020-9648

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.049EPSS

CVE•added 2016/02/10 8:59 p.m.•37 views

CVE-2016-0955

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog.

6.1CVSS5.8AI score0.00334EPSS

CVE•added 2016/08/09 8:59 p.m.•37 views

CVE-2016-4168

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS5.9AI score0.00641EPSS

CVE•added 2016/12/15 6:59 a.m.•37 views

CVE-2016-7882

Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks.

6.1CVSS5.9AI score0.01252EPSS

CVE•added 2019/10/25 3:15 p.m.•37 views

CVE-2019-8083

Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.4AI score0.01639EPSS

CVE•added 2020/06/12 2:15 p.m.•36 views

CVE-2020-9647

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

6.1CVSS5.9AI score0.049EPSS

CVE•added 2020/09/10 5:15 p.m.•36 views

CVE-2020-9736

AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be...

6.8CVSS5.3AI score0.0209EPSS

CVE•added 2020/09/10 5:15 p.m.•36 views

CVE-2020-9743

AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value....

6.1CVSS6.1AI score0.03316EPSS

CVE•added 2018/10/17 6:29 p.m.•35 views

CVE-2018-15970

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

CVE•added 2018/10/17 6:29 p.m.•35 views

CVE-2018-15972

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.00982EPSS

CVE•added 2020/09/10 5:15 p.m.•34 views

CVE-2020-9738

6.8CVSS5AI score0.0209EPSS

CVE•added 2018/10/17 6:29 p.m.•33 views

CVE-2018-15969

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

6.1CVSS5.6AI score0.01145EPSS

Total number of security vulnerabilities55