Priority MEDIUM 45
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01047 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-22
Priority MEDIUM 45
Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00897 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-918
Priority MEDIUM 45
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.01004 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-611
Priority LOW 25
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0039 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 25
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0039 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority MEDIUM 45
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00892 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-306
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
Priority LOW 24
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00359 · Published 2026-07-14 · Fixed in 2026.6.0, SP2 - Hotfix for NPR-43972 +1 CWE-79
THREATIST.IORead the docs