Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

143 records

Advisory: Adobe Experience Manager — helpx.adobe.com/security/products/experience-manager/apsb24… Clear all filters
TI-2024-24036 CVE-2024-36213 · GHSA-rp53-2ch4-r2gq

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 25

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00385 Published 2024-06-13 No fix listed CWE-79
TI-2024-17217 CVE-2024-26126 · GHSA-gr49-h65r-cw4c

Adobe Experience Manager | Improper Input Validation (CWE-20)

Priority LOW 20

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00681 Published 2024-06-13 No fix listed CWE-20
TI-2024-23973 CVE-2024-36150 · GHSA-hgp5-r8w2-frrr

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-23979 CVE-2024-36156 · GHSA-4662-jh8w-4j8m

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-13571 CVE-2024-20769 · GHSA-hc3r-wf5h-p922

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-23980 CVE-2024-36157 · GHSA-7hjv-959f-2qjf

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-22576 CVE-2024-34120 · GHSA-w26v-m725-wjxm

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00676 Published 2024-06-13 No fix listed CWE-79
TI-2024-17178 CVE-2024-26082 · GHSA-438g-mj2j-8f54

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00676 Published 2024-06-13 No fix listed CWE-79
TI-2024-17184 CVE-2024-26088 · GHSA-2q23-96mx-5x2w

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-24047 CVE-2024-36225 · GHSA-7j88-hp3g-mw9c

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 24

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00313 Published 2024-06-13 No fix listed CWE-79
TI-2024-17202 CVE-2024-26110 · GHSA-hhhv-67qj-2x5m

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-23976 CVE-2024-36153 · GHSA-w939-7ww2-rwgw

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-23983 CVE-2024-36160 · GHSA-rhrf-hh3q-54pc

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 26

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2024-06-13 No fix listed CWE-79
TI-2024-17171 CVE-2024-26075 · GHSA-9fc4-553g-65rr

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 27

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00473 Published 2024-06-13 No fix listed CWE-79
TI-2024-17170 CVE-2024-26074 · GHSA-7v5x-w92m-cv3c

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 27

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00502 Published 2024-06-13 No fix listed CWE-79
Load more