Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1299 records

Vendor: Adobe Component: Experience Manager Clear all filters
TI-2026-73524 CVE-2026-90532 · GHSA-3xfw-qrmm-gqj7

Adobe Experience Manager authorization flaw allows code execution

Priority MEDIUM 50

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the v…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00825 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP1 - Hotfix for GRANITE-72352 +8 CWE-863
TI-2026-73523 CVE-2026-90531 · GHSA-r3pm-6x5c-8wc2

XXE in Adobe Experience Manager allows privilege escalation

Priority MEDIUM 46

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.014 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP1 - Hotfix for GRANITE-71772 +6 CWE-611
TI-2026-73514 CVE-2026-83960 · GHSA-hh6f-fx98-crmg

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00203 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP3 - Hotfix for SITES-49893 + SITES-49334 + SITES-48208 +1 CWE-79
TI-2026-73513 CVE-2026-83958 · GHSA-2x23-26gv-h585

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00203 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP3 - Hotfix for SITES-49893 + SITES-49334 + SITES-48208 +1 CWE-79
TI-2026-73511 CVE-2026-83662 · GHSA-jfw7-5gx2-274v

Reflected cross-site scripting in Adobe Experience Manager

Priority MEDIUM 44

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01026 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP3 - Hotfix for SITES-49893 + SITES-49334 + SITES-48208 +1 CWE-79
TI-2026-73499 CVE-2026-75732 · GHSA-2pp9-gm8g-v7px

Authorization flaw in Adobe Experience Manager allows code execution

Priority MEDIUM 44

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the v…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00713 Published 2026-10-13 Fixed in 6.5 LTS SP1 - Hotfix for NPR-44637, 6.5 LTS SP2 - Hotfix for NPR-44637 +7 CWE-863
TI-2026-73469 CVE-2026-48398 · GHSA-4vwx-2j6p-jghh

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00249 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73468 CVE-2026-48383 · GHSA-hh6w-v424-vc4w

Incorrect authorization in Adobe Experience Manager

Priority MEDIUM 51

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the v…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00972 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP1 - Hotfix for GRANITE-72352 +8 CWE-863
TI-2026-73467 CVE-2026-48382 · GHSA-h975-wwvw-q4xg

Incorrect authorization in Adobe Experience Manager

Priority MEDIUM 51

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the v…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00972 Published 2026-10-13 Fixed in 2026.9.28386, 6.5 LTS SP1 - Hotfix for GRANITE-72352 +8 CWE-863
TI-2026-73644 CVE-2026-110084 · GHSA-vc68-3wxr-xhq3

XML injection in Adobe Experience Manager enables security bypass

Priority LOW 32

Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00467 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-91
TI-2026-73643 CVE-2026-110083 · GHSA-cjph-xgjg-243r

SQL injection in Adobe Experience Manager allows security bypass

Priority LOW 31

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00345 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-89
TI-2026-73642 CVE-2026-110082 · GHSA-mvph-8q79-mf87

Reflected cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-10-13 Fixed in 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052 +3 CWE-79
TI-2026-73641 CVE-2026-110081 · GHSA-h7r8-f3c4-5jmx

Stored cross-site scripting in Adobe Experience Manager form fields

Priority LOW 24

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-10-13 Fixed in 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052 +3 CWE-79
TI-2026-73640 CVE-2026-110080 · GHSA-qvx8-35g9-945q

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73639 CVE-2026-110079 · GHSA-6px2-j6qp-j7x5

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73638 CVE-2026-110078 · GHSA-8hwx-8396-f975

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73637 CVE-2026-110077 · GHSA-jvf2-mfm5-7rv3

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73636 CVE-2026-110076 · GHSA-f94m-mmpx-f558

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73635 CVE-2026-110075 · GHSA-4xvw-2cmp-v5cf

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73634 CVE-2026-110074 · GHSA-49jg-xppc-33w2

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052 +4 CWE-79
TI-2026-73633 CVE-2026-110073 · GHSA-rm5q-64w8-54r4

Stored cross-site scripting in Adobe Experience Manager forms

Priority LOW 24

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73632 CVE-2026-110037 · GHSA-g6wf-45vh-gjf4

Stored cross-site scripting in Adobe Experience Manager form fields

Priority LOW 24

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-10-13 Fixed in 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052 +3 CWE-79
TI-2026-73630 CVE-2026-109415 · GHSA-gwc4-7jc7-jg29

Stored cross-site scripting in Adobe Experience Manager form fields

Priority LOW 24

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-10-13 Fixed in 6.5 LTS SP1 - Hotfix for GRANITE-75052, 6.5 LTS SP2 - Hotfix for GRANITE-75052 +3 CWE-79
TI-2026-73628 CVE-2026-107682 · GHSA-wwx7-6hf2-j2rm

DOM-based cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
TI-2026-73624 CVE-2026-107305 · GHSA-xmjw-jq36-rgf4

Stored cross-site scripting in Adobe Experience Manager

Priority LOW 24

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00362 Published 2026-10-13 Fixed in 6.5.23 - Hotfix for GRANITE-75052, 6.5.24 - Hotfix for GRANITE-75052 +1 CWE-79
Load more