Adobe Experience Manager vulnerabilities
1,165 known vulnerabilities affecting adobe/experience_manager.
Total CVEs
1,165
CISA KEV
0
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL14HIGH30MEDIUM1111LOW10
Vulnerabilities
Page 54 of 59
CVE-2022-42366P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-42366 [MEDIUM] CWE-79 CVE-2022-42366: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44469P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44469 [MEDIUM] CWE-79 CVE-2022-44469: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44468P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44468 [MEDIUM] CWE-79 CVE-2022-44468: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35696P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-35696 [MEDIUM] CWE-79 CVE-2022-35696: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42360P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-42360 [MEDIUM] CWE-79 CVE-2022-42360: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35694P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-35694 [MEDIUM] CWE-79 CVE-2022-35694: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44462P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-16
CVE-2022-44462 [MEDIUM] CWE-79 CVE-2022-44462: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35697P4MEDIUMCVSS 5.4≥ unspecified, ≤ 2.20.62022-08-10
CVE-2022-35697 [MEDIUM] CWE-79 CVE-2022-35697: Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cro
Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue require
nvd
CVE-2023-48447P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48447 [MEDIUM] CWE-79 CVE-2023-48447: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48497P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48497 [MEDIUM] CWE-79 CVE-2023-48497: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48498P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48498 [MEDIUM] CWE-79 CVE-2023-48498: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48499P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48499 [MEDIUM] CWE-79 CVE-2023-48499: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48443P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48443 [MEDIUM] CWE-79 CVE-2023-48443: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48448P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48448 [MEDIUM] CWE-79 CVE-2023-48448: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48500P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48500 [MEDIUM] CWE-79 CVE-2023-48500: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-48526P4MEDIUMCVSS 5.4≤ 6.5.18.02023-12-15
CVE-2023-48526 [MEDIUM] CWE-79 CVE-2023-48526: Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scriptin
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42348P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42348 [MEDIUM] CWE-79 CVE-2022-42348: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44510P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-22
CVE-2022-44510 [MEDIUM] CWE-79 CVE-2022-44510: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-29322P4MEDIUMCVSS 5.4fixed in 6.5.17.02023-06-15
CVE-2023-29322 [MEDIUM] CWE-79 CVE-2023-29322: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42365P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42365 [MEDIUM] CWE-79 CVE-2022-42365: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd