Adobe Experience Manager vulnerabilities
1,088 known vulnerabilities affecting adobe/experience_manager.
Total CVEs
1,088
CISA KEV
0
Public exploits
7
Exploited in wild
0
Severity breakdown
CRITICAL11HIGH27MEDIUM1042LOW8
Vulnerabilities
Page 49 of 55
CVE-2022-42345MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42345 [MEDIUM] CWE-79 CVE-2022-42345: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42356MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42356 [MEDIUM] CWE-79 CVE-2022-42356: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35693MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-35693 [MEDIUM] CWE-79 CVE-2022-35693: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42348MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42348 [MEDIUM] CWE-79 CVE-2022-42348: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42367MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-42367 [MEDIUM] CWE-79 CVE-2022-42367: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44473MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44473 [MEDIUM] CWE-79 CVE-2022-44473: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42366MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-42366 [MEDIUM] CWE-79 CVE-2022-42366: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42351MEDIUMCVSS 4.3fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-42351 [MEDIUM] CWE-863 CVE-2022-42351: Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vuln
Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.
nvd
CVE-2022-44469MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44469 [MEDIUM] CWE-79 CVE-2022-44469: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44468MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44468 [MEDIUM] CWE-79 CVE-2022-44468: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35696MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-35696 [MEDIUM] CWE-79 CVE-2022-35696: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42360MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-42360 [MEDIUM] CWE-79 CVE-2022-42360: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35694MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-35694 [MEDIUM] CWE-79 CVE-2022-35694: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44462MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44462 [MEDIUM] CWE-79 CVE-2022-44462: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-28851MEDIUMCVSS 5.4fixed in 6.5.14.0≥ unspecified, ≤ 6.5.13.02022-09-30
CVE-2022-28851 [MEDIUM] CWE-79 CVE-2022-28851: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile
nvd
CVE-2022-38438MEDIUMCVSS 5.4fixed in 6.5.14.0≥ unspecified, ≤ 6.5.13.02022-09-23
CVE-2022-38438 [MEDIUM] CWE-79 CVE-2022-38438: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile
nvd
CVE-2022-38439MEDIUMCVSS 5.4fixed in 6.5.14.0≥ unspecified, ≤ 6.5.13.02022-09-23
CVE-2022-38439 [MEDIUM] CWE-79 CVE-2022-38439: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile
nvd
CVE-2022-30683MEDIUMCVSS 5.3≤ 6.5.13.0≥ unspecified, ≤ 6.5.13.02022-09-16
CVE-2022-30683 [MEDIUM] CWE-657 CVE-2022-30683: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a Violation of Secure Design
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the security feature of the encryption mechanism in the backend . An attacker could leverage this vulnerability to decrypt secrets, however, this is a high-complexity attack as the threat actor needs
nvd
CVE-2022-30678MEDIUMCVSS 5.4≤ 6.5.13.0≥ unspecified, ≤ 6.5.13.02022-09-16
CVE-2022-30678 [MEDIUM] CWE-79 CVE-2022-30678: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile
nvd
CVE-2022-30680MEDIUMCVSS 5.4≤ 6.5.13.0≥ unspecified, ≤ 6.5.13.02022-09-16
CVE-2022-30680 [MEDIUM] CWE-79 CVE-2022-30680: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile
nvd