Adobe Experience Manager vulnerabilities
1,088 known vulnerabilities affecting adobe/experience_manager.
Total CVEs
1,088
CISA KEV
0
Public exploits
7
Exploited in wild
0
Severity breakdown
CRITICAL11HIGH27MEDIUM1042LOW8
Vulnerabilities
Page 34 of 55
CVE-2024-26127LOWCVSS 3.5fixed in 6.5.21fixed in 2024.52024-06-13
CVE-2024-26127 [LOW] CWE-20 CVE-2024-26127: Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vu
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.
nvd
CVE-2024-26126LOWCVSS 3.5fixed in 6.5.21fixed in 2024.52024-06-13
CVE-2024-26126 [LOW] CWE-20 CVE-2024-26126: Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vu
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.
nvd
CVE-2024-36226LOWCVSS 3.5fixed in 6.5.21fixed in 2024.52024-06-13
CVE-2024-36226 [LOW] CWE-20 CVE-2024-36226: Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vu
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.
nvd
CVE-2024-26076MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26076 [MEDIUM] CWE-79 CVE-2024-26076: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26122MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26122 [MEDIUM] CWE-79 CVE-2024-26122: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26097MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26097 [MEDIUM] CWE-79 CVE-2024-26097: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-20778MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-20778 [MEDIUM] CWE-79 CVE-2024-20778: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26046MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26046 [MEDIUM] CWE-79 CVE-2024-26046: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26047MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26047 [MEDIUM] CWE-79 CVE-2024-26047: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-20780MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-20780 [MEDIUM] CWE-79 CVE-2024-20780: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26087MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26087 [MEDIUM] CWE-79 CVE-2024-26087: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26098MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26098 [MEDIUM] CWE-79 CVE-2024-26098: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26084MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26084 [MEDIUM] CWE-79 CVE-2024-26084: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26079MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-26079 [MEDIUM] CWE-79 CVE-2024-26079: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-20779MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-10
CVE-2024-20779 [MEDIUM] CWE-79 CVE-2024-20779: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-20800MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-04
CVE-2024-20800 [MEDIUM] CWE-79 CVE-2024-20800: Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scriptin
Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable web pages. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable script. Thi
nvd
CVE-2024-20799MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-04-02
CVE-2024-20799 [MEDIUM] CWE-79 CVE-2024-20799: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26034MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-03-18
CVE-2024-26034 [MEDIUM] CWE-79 CVE-2024-26034: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26094MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-03-18
CVE-2024-26094 [MEDIUM] CWE-79 CVE-2024-26094: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd
CVE-2024-26031MEDIUMCVSS 5.4fixed in 6.5.20.0fixed in 2024.3.02024-03-18
CVE-2024-26031 [MEDIUM] CWE-79 CVE-2024-26031: Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
nvd