Adobe Experience Manager vulnerabilities
962 known vulnerabilities affecting adobe/adobe_experience_manager.
Total CVEs
962
CISA KEV
1
actively exploited
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL8HIGH14MEDIUM932LOW8
Vulnerabilities
Page 23 of 49
CVE-2024-43743MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43743 [MEDIUM] CWE-79 CVE-2024-43743: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-43721MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43721 [MEDIUM] CWE-79 CVE-2024-43721: Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scriptin
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run
nvd
CVE-2024-43727MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43727 [MEDIUM] CWE-79 CVE-2024-43727: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-43713MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43713 [MEDIUM] CWE-79 CVE-2024-43713: Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scriptin
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run
nvd
CVE-2024-52843MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52843 [MEDIUM] CWE-79 CVE-2024-52843: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52854MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52854 [MEDIUM] CWE-79 CVE-2024-52854: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-43725MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43725 [MEDIUM] CWE-79 CVE-2024-43725: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52991MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52991 [MEDIUM] CWE-79 CVE-2024-52991: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52828MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52828 [MEDIUM] CWE-79 CVE-2024-52828: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52855MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52855 [MEDIUM] CWE-79 CVE-2024-52855: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52840MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52840 [MEDIUM] CWE-79 CVE-2024-52840: Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scriptin
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run
nvd
CVE-2024-52832MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52832 [MEDIUM] CWE-79 CVE-2024-52832: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-43745MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43745 [MEDIUM] CWE-79 CVE-2024-43745: Adobe Experience Manager versions 6.5.21 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.21 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-52822MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52822 [MEDIUM] CWE-79 CVE-2024-52822: Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scriptin
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run
nvd
CVE-2024-52865MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52865 [MEDIUM] CWE-79 CVE-2024-52865: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-43751MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43751 [MEDIUM] CWE-79 CVE-2024-43751: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-43752MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-43752 [MEDIUM] CWE-79 CVE-2024-43752: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52858MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52858 [MEDIUM] CWE-79 CVE-2024-52858: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52817MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52817 [MEDIUM] CWE-79 CVE-2024-52817: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-52818MEDIUMCVSS 5.4≤ 6.5.212024-12-10
CVE-2024-52818 [MEDIUM] CWE-79 CVE-2024-52818: Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd