# Adobe Experience Manager.

Every CVE that names Adobe Experience Manager among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-54272.md)
  `CVE-2025-54272` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-61796.md)
  `CVE-2025-61796` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Improper Input Validation (CWE-20)](https://agentprime.io/advisories/CVE-2025-54250.md)
  `CVE-2025-54250` · CVE record: Adobe Adobe Experience Manager · CVSS 4.9 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-20
- [Adobe Experience Manager | Improper Input Validation (CWE-20)](https://agentprime.io/advisories/CVE-2025-54247.md)
  `CVE-2025-54247` · CVE record: Adobe Adobe Experience Manager · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-20
- [Adobe Experience Manager | Incorrect Authorization (CWE-863)](https://agentprime.io/advisories/CVE-2025-54246.md)
  `CVE-2025-54246` · CVE record: Adobe Adobe Experience Manager · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Broken access control
- [Adobe Experience Manager | Improper Input Validation (CWE-20)](https://agentprime.io/advisories/CVE-2025-54248.md)
  `CVE-2025-54248` · CVE record: Adobe Adobe Experience Manager · CVSS 7.7 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-20
- [Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)](https://agentprime.io/advisories/CVE-2025-54251.md)
  `CVE-2025-54251` · CVE record: Adobe Adobe Experience Manager · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Other injection
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-54252.md)
  `CVE-2025-54252` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2025-54249.md)
  `CVE-2025-54249` · CVE record: Adobe Adobe Experience Manager · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47054.md)
  `CVE-2025-47054` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46849.md)
  `CVE-2025-46849` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46852.md)
  `CVE-2025-46852` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46856.md)
  `CVE-2025-46856` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46932.md)
  `CVE-2025-46932` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46936.md)
  `CVE-2025-46936` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46962.md)
  `CVE-2025-46962` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46998.md)
  `CVE-2025-46998` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Incorrect Authorization (CWE-863)](https://agentprime.io/advisories/CVE-2025-54253.md)
  `CVE-2025-54253` · CVE record: Adobe Adobe Experience Manager · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.89 · Not analysed yet · Published 5 Aug 2025 · Tags: Broken access control
- [Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)](https://agentprime.io/advisories/CVE-2025-54254.md)
  `CVE-2025-54254` · CVE record: Adobe Adobe Experience Manager · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.70 · Not analysed yet · Published 5 Aug 2025 · Tags: XML external entities (XXE)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46958.md)
  `CVE-2025-46958` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 5 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47001.md)
  `CVE-2025-47001` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 30 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46993.md)
  `CVE-2025-46993` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46996.md)
  `CVE-2025-46996` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47061.md)
  `CVE-2025-47061` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47053.md)
  `CVE-2025-47053` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46959.md)
  `CVE-2025-46959` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-49547.md)
  `CVE-2025-49547` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-49534.md)
  `CVE-2025-49534` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46995.md)
  `CVE-2025-46995` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46917.md)
  `CVE-2025-46917` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46901.md)
  `CVE-2025-46901` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47052.md)
  `CVE-2025-47052` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46954.md)
  `CVE-2025-46954` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47077.md)
  `CVE-2025-47077` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47091.md)
  `CVE-2025-47091` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47065.md)
  `CVE-2025-47065` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47015.md)
  `CVE-2025-47015` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47029.md)
  `CVE-2025-47029` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47060.md)
  `CVE-2025-47060` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46951.md)
  `CVE-2025-46951` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46985.md)
  `CVE-2025-46985` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46874.md)
  `CVE-2025-46874` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47075.md)
  `CVE-2025-47075` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46971.md)
  `CVE-2025-46971` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46997.md)
  `CVE-2025-46997` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46922.md)
  `CVE-2025-46922` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46882.md)
  `CVE-2025-46882` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46991.md)
  `CVE-2025-46991` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47016.md)
  `CVE-2025-47016` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46978.md)
  `CVE-2025-46978` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46878.md)
  `CVE-2025-46878` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47073.md)
  `CVE-2025-47073` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47041.md)
  `CVE-2025-47041` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46838.md)
  `CVE-2025-46838` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46942.md)
  `CVE-2025-46942` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46949.md)
  `CVE-2025-46949` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46989.md)
  `CVE-2025-46989` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46981.md)
  `CVE-2025-46981` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-46905.md)
  `CVE-2025-46905` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)](https://agentprime.io/advisories/CVE-2025-47050.md)
  `CVE-2025-47050` · CVE record: Adobe Adobe Experience Manager · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/technology/adobe-experience-manager.md>
Older: <https://agentprime.io/advisories/technology/adobe-experience-manager.md?cursor=WyIyMDI1LTA2LTEwVDIyOjIwOjA4LjA4OTAwMFoiLCJDVkUtMjAyNS00NzA1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=adobe-experience-manager&cursor=WyIyMDI1LTEwLTE0VDIxOjE4OjEzLjUzNjAwMFoiLCJDVkUtMjAyNS02MTc5NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/adobe-experience-manager/?cursor=WyIyMDI1LTEwLTE0VDIxOjE4OjEzLjUzNjAwMFoiLCJDVkUtMjAyNS02MTc5NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.