Adobe Experience Manager vulnerabilities

CVE-2022-38438 [MEDIUM] CWE-79 CVE-2022-38438: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30677 [MEDIUM] CWE-79 CVE-2022-30677: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30678 [MEDIUM] CWE-79 CVE-2022-30678: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30680 [MEDIUM] CWE-79 CVE-2022-30680: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30681 [MEDIUM] CWE-79 CVE-2022-30681: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30684 [MEDIUM] CWE-79 CVE-2022-30684: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30685 [MEDIUM] CWE-79 CVE-2022-30685: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-34218 [MEDIUM] CWE-79 CVE-2022-34218: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30686 [MEDIUM] CWE-79 CVE-2022-30686: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-30682 [MEDIUM] CWE-79 CVE-2022-30682: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-35664 [MEDIUM] CWE-79 CVE-2022-35664: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2022-38439 [MEDIUM] CWE-79 CVE-2022-38439: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scrip Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privile

CVE-2023-21615 [MEDIUM] CWE-79 CVE-2023-21615: Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2023-21616 [MEDIUM] CWE-79 CVE-2023-21616: Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2023-22253 [MEDIUM] CWE-79 CVE-2023-22253: Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2023-22252 [MEDIUM] CWE-79 CVE-2023-22252: Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2023-22269 [MEDIUM] CWE-79 CVE-2023-22269: Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2023-22254 [MEDIUM] CWE-79 CVE-2023-22254: Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

CVE-2025-64872 [MEDIUM] CWE-79 CVE-2025-64872: Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting ( Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

CVE-2026-34694 [MEDIUM] CWE-79 CVE-2026-34694: Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored C Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the v