Adobe Experience Manager vulnerabilities
929 known vulnerabilities affecting adobe/adobe_experience_manager.
Total CVEs
929
CISA KEV
1
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL8HIGH14MEDIUM899LOW8
Vulnerabilities
Page 45 of 47
CVE-2023-48497P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48497 [MEDIUM] CWE-79 CVE-2023-48497: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48498P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48498 [MEDIUM] CWE-79 CVE-2023-48498: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48499P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48499 [MEDIUM] CWE-79 CVE-2023-48499: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48443P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48443 [MEDIUM] CWE-79 CVE-2023-48443: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48448P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48448 [MEDIUM] CWE-79 CVE-2023-48448: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48500P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48500 [MEDIUM] CWE-79 CVE-2023-48500: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48526P4MEDIUMCVSS 5.4≤ 6.5.182023-12-15
CVE-2023-48526 [MEDIUM] CWE-79 CVE-2023-48526: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-29322P4MEDIUMCVSS 5.4≤ 6.5.16.02023-06-15
CVE-2023-29322 [MEDIUM] CWE-79 CVE-2023-29322: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-29304P4MEDIUMCVSS 5.4≤ 6.5.16.02023-06-15
CVE-2023-29304 [MEDIUM] CWE-79 CVE-2023-29304: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-29302P4MEDIUMCVSS 5.4≤ 6.5.16.02023-06-15
CVE-2023-29302 [MEDIUM] CWE-79 CVE-2023-29302: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26105P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26105 [MEDIUM] CWE-79 CVE-2024-26105: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26103P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26103 [MEDIUM] CWE-79 CVE-2024-26103: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26104P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26104 [MEDIUM] CWE-79 CVE-2024-26104: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26118P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26118 [MEDIUM] CWE-79 CVE-2024-26118: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26102P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26102 [MEDIUM] CWE-79 CVE-2024-26102: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26107P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26107 [MEDIUM] CWE-79 CVE-2024-26107: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26106P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26106 [MEDIUM] CWE-79 CVE-2024-26106: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-38215P4MEDIUMCVSS 5.4≤ 6.5.17.02023-09-13
CVE-2023-38215 [MEDIUM] CWE-79 CVE-2023-38215: Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-38214P4MEDIUMCVSS 5.4≤ 6.5.17.02023-09-13
CVE-2023-38214 [MEDIUM] CWE-79 CVE-2023-38214: Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2024-26101P4MEDIUMCVSS 5.4≤ 6.5.192024-03-18
CVE-2024-26101 [MEDIUM] CWE-79 CVE-2024-26101: Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd