Advisories · Technology

Adobe Experience Manager.

Every CVE that names Adobe Experience Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-54272 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2025
CVE-2025-61796 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2025
CVE-2025-54250 CVE record

CVSS 4.9 Medium

Adobe Experience Manager | Improper Input Validation (CWE-20)
- Adobe Experience Manager
- CWE-20
Not analysed yet 9 Sept 2025
CVE-2025-54247 CVE record

CVSS 6.5 Medium

Adobe Experience Manager | Improper Input Validation (CWE-20)
- Adobe Experience Manager
- CWE-20
Not analysed yet 9 Sept 2025
CVE-2025-54246 CVE record

CVSS 6.5 Medium

Adobe Experience Manager | Incorrect Authorization (CWE-863)
- Adobe Experience Manager
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-54248 CVE record

CVSS 7.7 High

Adobe Experience Manager | Improper Input Validation (CWE-20)
- Adobe Experience Manager
- CWE-20
Not analysed yet 9 Sept 2025
CVE-2025-54251 CVE record

CVSS 4.3 Medium

Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
- Adobe Experience Manager
- Other injection
Not analysed yet 9 Sept 2025
CVE-2025-54252 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025
CVE-2025-54249 CVE record

CVSS 6.5 Medium

Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Experience Manager
- Server-side request forgery (SSRF)
Not analysed yet 9 Sept 2025
CVE-2025-47054 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46849 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46852 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46856 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46932 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46936 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46962 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-46998 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-54253 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Adobe Experience Manager | Incorrect Authorization (CWE-863)
- Adobe Experience Manager
- Broken access control
Not analysed yet 5 Aug 2025
CVE-2025-54254 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- Adobe Experience Manager
- XML external entities (XXE)
Not analysed yet 5 Aug 2025
CVE-2025-46958 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2025
CVE-2025-47001 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2025
CVE-2025-46993 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-46996 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-47061 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-47053 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025
CVE-2025-46959 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025
CVE-2025-49547 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-49534 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-46995 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46917 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46901 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47052 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46954 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47077 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47091 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47065 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47015 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47029 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47060 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46951 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46985 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46874 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47075 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46971 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46997 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46922 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46882 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46991 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47016 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46978 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46878 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47073 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47041 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46838 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46942 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46949 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46989 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46981 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-46905 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-47050 CVE record

CVSS 5.4 Medium

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025