3.276 sonuç
5.4Orta
CVE-2026-123258

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of …

9.9Kritik
CVE-2026-119017

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitati…

1.1%EPSS
5.4Orta
CVE-2026-118482

Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Adobe Experience Manager 6.5

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited read and w…

5.4Orta
CVE-2026-118478

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser whe…

5.4Orta
CVE-2026-118197

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of …

5.4Orta
CVE-2026-114372

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser whe…

9.9Kritik
CVE-2026-114371

Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitati…

1.1%EPSS
9.9Kritik
CVE-2026-113580

Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to …

1.3%EPSS
9.9Kritik
CVE-2026-113579

Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)

Adobe Adobe Experience Manager as a Cloud Service; Adobe Adobe Experience Manager 6.5; Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to …

1.3%EPSS
8.8Yüksek
CVE-2026-121913

Adobe Connect | Incorrect Authorization (CWE-863)

Adobe Adobe Connect

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this…

10.0Kritik
CVE-2026-121352

Adobe Connect | Incorrect Authorization (CWE-863)

Adobe Adobe Connect

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access to sensitive resources. Exploitation of this issue does not require user …

5.4Orta
CVE-2026-121912

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

Adobe Adobe Connect

Adobe Connect is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to t…

5.4Orta
CVE-2026-121910

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

Adobe Adobe Connect

Adobe Connect is affected by a Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's br…

9.1Kritik
CVE-2026-121355

Adobe Connect | Incorrect Authorization (CWE-863)

Adobe Adobe Connect

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does no…