Adobe Experience Manager vulnerabilities
1,269 known vulnerabilities affecting adobe/experience_manager.
Total CVEs
1,269
CISA KEV
0
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL15HIGH30MEDIUM1213LOW11
Vulnerabilities
Page 60 of 64
CVE-2023-29304P4MEDIUMCVSS 5.4fixed in 6.5.17.02023-06-15
CVE-2023-29304 [MEDIUM] CWE-79 CVE-2023-29304: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2023-29302P4MEDIUMCVSS 5.4fixed in 6.5.17.02023-06-15
CVE-2023-29302 [MEDIUM] CWE-79 CVE-2023-29302: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scrip
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42365P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42365 [MEDIUM] CWE-79 CVE-2022-42365: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42352P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42352 [MEDIUM] CWE-79 CVE-2022-42352: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44463P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44463 [MEDIUM] CWE-79 CVE-2022-44463: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42346P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42346 [MEDIUM] CWE-79 CVE-2022-42346: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44471P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44471 [MEDIUM] CWE-79 CVE-2022-44471: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42357P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42357 [MEDIUM] CWE-79 CVE-2022-42357: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44474P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44474 [MEDIUM] CWE-79 CVE-2022-44474: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44465P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44465 [MEDIUM] CWE-79 CVE-2022-44465: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42364P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42364 [MEDIUM] CWE-79 CVE-2022-42364: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44470P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44470 [MEDIUM] CWE-79 CVE-2022-44470: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42349P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42349 [MEDIUM] CWE-79 CVE-2022-42349: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-35695P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-35695 [MEDIUM] CWE-79 CVE-2022-35695: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44467P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44467 [MEDIUM] CWE-79 CVE-2022-44467: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42354P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42354 [MEDIUM] CWE-79 CVE-2022-42354: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-44466P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-44466 [MEDIUM] CWE-79 CVE-2022-44466: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42350P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42350 [MEDIUM] CWE-79 CVE-2022-42350: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-30679P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-30679 [MEDIUM] CWE-79 CVE-2022-30679: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd
CVE-2022-42362P4MEDIUMCVSS 5.4fixed in 6.5.15.0≥ unspecified, ≤ 6.5.14.02022-12-19
CVE-2022-42362 [MEDIUM] CWE-79 CVE-2022-42362: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scriptin
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
nvd