Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

57 records

Advisory: Adobe Experience Manager 6.5, Adobe Experience Manager 6.5 LTS, Adobe Experience Manager as a Cloud Service — helpx.adobe.com/security/products/experience-manager/apsb26… Clear all filters
TI-2026-35428 CVE-2026-47980 · GHSA-p454-mq32-f8wx

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35393 CVE-2026-47945 · GHSA-3j86-86g5-p9wj

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00282 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35389 CVE-2026-47941 · GHSA-j7gp-v4j4-93pc

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00282 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35695 CVE-2026-48289 · GHSA-c3rc-pj8m-f5fv

Adobe Experience Manager | Improper Input Validation (CWE-20)

Priority LOW 16

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00262 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-20
TI-2026-35703 CVE-2026-48297 · GHSA-24rj-crvf-pj7r

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35384 CVE-2026-47936 · GHSA-2w3v-cv29-rpc9

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35404 CVE-2026-47956 · GHSA-hr7g-p6x3-c3hw

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35387 CVE-2026-47939 · GHSA-gmhm-cv6m-4rh7

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00282 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35425 CVE-2026-47977 · GHSA-v374-qf6h-3mhj

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35420 CVE-2026-47972 · GHSA-mq2q-567c-v6rg

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35402 CVE-2026-47954 · GHSA-5gw3-j69r-6rh9

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35399 CVE-2026-47951 · GHSA-gwww-gmwc-4v9p

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35391 CVE-2026-47943 · GHSA-3mqx-256v-hfpr

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00282 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
TI-2026-35422 CVE-2026-47974 · GHSA-p73p-xq6p-r6qp

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 2026.5.0, SP2 +1 CWE-79
Load more