adobe experience manager vulnerabilities (CVE)

CVE records published for adobe experience manager, newest first. Follow to get an email when a new one appears.

626 results
10.0Critical
CVE-2026-90532

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitatio…

9.6Critical
CVE-2026-90531

Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal re…

1.4%EPSS
5.4Medium
CVE-2026-83960

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of …

5.4Medium
CVE-2026-83958

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of …

9.3Critical
CVE-2026-83662

Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or…

1.0%EPSS
9.9Critical
CVE-2026-75732

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitatio…

10.0Critical
CVE-2026-48383

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitatio…

10.0Critical
CVE-2026-48382

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitatio…

5.4Medium
CVE-2026-110082

Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the conte…

5.4Medium
CVE-2026-110081

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser whe…

5.4Medium
CVE-2026-110074

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of …

5.4Medium
CVE-2026-110037

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser whe…

5.4Medium
CVE-2026-109415

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Experience Manager 6.5 LTS; Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser whe…