Skip to contentAdobe Experience Manager vulnerabilities
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306815.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306845.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-342185.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306865.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306825.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306805.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306855.4 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306785.4 Medium
- adobe experience managerAEM Violation of Secure Design Principles Security feature bypassCVE-2022-306835.3 Medium
- adobe experience managerAEM Reflected XSS Arbitrary code executionCVE-2022-306775.4 Medium
- adobe experience manager, web content management core components +1 moreAEM File Upload Security Issue leading to RXSSCVE-2022-35697Fix available5.4 Medium
- adobe acs aem commons, experience manager +1 moreAdobe Consulting Services Reflected Cross-Site Scripting Arbitrary Code ExecutionCVE-2022-28820Fix available6.1 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in the Spin SetCVE-2021-437648.0 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in workflow Stages parameterCVE-2021-441768.1 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS on Edit Tag page via Localization inputCVE-2021-437618.0 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in user name parameter in the package managerCVE-2021-441778.1 High
- adobe experience manager, experience manager cloud service +1 moreAEM Forms Improper Restriction of XML External Entity ReferenceCVE-2021-407229.8 Critical
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in the Carousel SetCVE-2021-437658.1 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.htmlCVE-2021-441785.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Unicode normalization leads to dispatcher bypassCVE-2021-437626.5 Medium
- adobe experience managerAdobe Experience Manager Path parameter Improper Input Validation Could Lead To DOSCVE-2021-407126.5 Medium
- adobe experience managerAdobe Experience Manager Reflected Cross Site Scripting via accesskey parameterCVE-2021-407146.1 Medium
- adobe experience managerAdobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle AttackCVE-2021-407135.9 Medium
- adobe experience managerAdobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code ExecutionCVE-2021-407115.4 Medium
- adobe experience managerAdobe Experience Manager Server-side Request Forgery could lead to Security feature bypassCVE-2021-286275.4 Medium
- adobe experience managerAdobe Experience Manager Cross-site Scripting vulnerability in inbox render.jspCVE-2021-286286.3 Medium
- adobe experience managerAdobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jspCVE-2021-286256.3 Medium
- adobe experience managerAdobe Experience Manager Improper Authorization at /content/usergeneratedCVE-2021-286263.7 Low
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code executionCVE-2021-210847.3 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-serviceCVE-2021-210837.5 High
- adobe consulting services commons, experience manager +1 moreReflected Cross-site Scripting (XSS) on version-compare and page-compare toolsCVE-2021-21043Fix available6.1 Medium
- adobe experience manager, experience manager forms add-on +1 moreBlind SSRF in Forms add-on for AEMCVE-2020-244445.8 Medium
- adobe experience managerHTML injection in AEM's content editor componentCVE-2020-97435.3 Medium
- adobe experience managerStored XSS in AEM Forms componentCVE-2020-97349.0 Critical
- adobe experience managerReflected XSS in AEM Inbox moduleCVE-2020-97429.0 Critical
- adobe experience managerStored XSS in AEM Forms ComponentsCVE-2020-97419.0 Critical
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97366.8 Medium
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97356.8 Medium
- adobe experience manager, experience manager forms +1 moreStored XSS in AEM Sites ComponentsCVE-2020-97329.0 Critical
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97386.8 Medium
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97376.8 Medium
- adobe experience manager, experience manager forms +1 moreSensitive information disclosure possible in AEMCVE-2020-97337.5 High
- adobe experience managerStored XSS in AEM Design Importer ComponentCVE-2020-97409.0 Critical
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected)...CVE-2020-96516.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based)...CVE-2020-96476.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored)...CVE-2020-96445.4 Medium
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability....CVE-2020-96486.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf)...CVE-2020-96437.5 High
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf)...CVE-2020-96457.5 High
- adobe experience managerAdobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf)...CVE-2020-37697.5 High
- Show moreLoading…