Advisories · Technology

Adobe Experience Manager.

Every CVE that names Adobe Experience Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-30677 CVE record

CVSS 5.4 Medium

AEM Reflected XSS Arbitrary code execution
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2022
CVE-2021-43764 CVE record

CVSS 8.0 High

Adobe Experience Manager Stored XSS in the Spin Set
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2022
CVE-2021-44176 CVE record

CVSS 8.1 High

Adobe Experience Manager Stored XSS in workflow Stages parameter
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2022
CVE-2021-43761 CVE record

CVSS 8.0 High

Adobe Experience Manager Stored XSS on Edit Tag page via Localization input
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2022
CVE-2021-44177 CVE record

CVSS 8.1 High

Adobe Experience Manager Stored XSS in user name parameter in the package manager
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2022
CVE-2021-40722 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

AEM Forms Improper Restriction of XML External Entity Reference
- Adobe Experience Manager
- XML external entities (XXE)
Not analysed yet 13 Jan 2022
CVE-2021-43765 CVE record

CVSS 8.1 High

Adobe Experience Manager Stored XSS in the Carousel Set
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2022
CVE-2021-44178 CVE record

CVSS 5.4 Medium

Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2022
CVE-2021-43762 CVE record

CVSS 6.5 Medium

Adobe Experience Manager Unicode normalization leads to dispatcher bypass
- Adobe Experience Manager
- CWE-20
Not analysed yet 13 Jan 2022
CVE-2021-40712 CVE record

CVSS 6.5 Medium

Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS
- Adobe Experience Manager
- CWE-20
Not analysed yet 27 Sept 2021
CVE-2021-40714 CVE record

CVSS 6.1 Medium

Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 27 Sept 2021
CVE-2021-40713 CVE record

CVSS 5.9 Medium

Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack
- Adobe Experience Manager
- Weak cryptography or TLS
Not analysed yet 27 Sept 2021
CVE-2021-40711 CVE record

CVSS 5.4 Medium

Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 27 Sept 2021
CVE-2021-28627 CVE record

CVSS 5.4 Medium

Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass
- Adobe Experience Manager
- Server-side request forgery (SSRF)
Not analysed yet 24 Aug 2021
CVE-2021-28628 CVE record

CVSS 6.3 Medium

Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Aug 2021
CVE-2021-28625 CVE record

CVSS 6.3 Medium

Adobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jsp
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Aug 2021
CVE-2021-28626 CVE record

CVSS 3.7 Low

Adobe Experience Manager Improper Authorization at /content/usergenerated
- Adobe Experience Manager
- Broken access control
Not analysed yet 24 Aug 2021
CVE-2021-21084 CVE record

CVSS 7.3 High

Adobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code execution
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 28 Jun 2021
CVE-2021-21083 CVE record

CVSS 7.5 High

Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service
- Adobe Experience Manager
- Broken access control
Not analysed yet 28 Jun 2021
CVE-2020-24444 CVE record

CVSS 5.8 Medium

Blind SSRF in Forms add-on for AEM
- Adobe Experience Manager
- Server-side request forgery (SSRF)
Not analysed yet 10 Dec 2020
CVE-2020-9743 CVE record

CVSS 5.3 Medium

HTML injection in AEM's content editor component
- Adobe Experience Manager
- CWE-20
Not analysed yet 10 Sept 2020
CVE-2020-9734 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Stored XSS in AEM Forms component
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9742 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Reflected XSS in AEM Inbox module
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9741 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Stored XSS in AEM Forms Components
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9736 CVE record

CVSS 6.8 Medium

Stored XSS in AEM's Content Repository Development Environment
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9735 CVE record

CVSS 6.8 Medium

Stored XSS in AEM's Content Repository Development Environment
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9732 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Stored XSS in AEM Sites Components
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9738 CVE record

CVSS 6.8 Medium

Stored XSS in AEM's Content Repository Development Environment
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9737 CVE record

CVSS 6.8 Medium

Stored XSS in AEM's Content Repository Development Environment
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9733 CVE record

CVSS 7.5 High

Sensitive information disclosure possible in AEM
- Adobe Experience Manager
- Information disclosure
Not analysed yet 10 Sept 2020
CVE-2020-9740 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Stored XSS in AEM Design Importer Component
- Adobe Experience Manager
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2020
CVE-2020-9651 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected)…
- Adobe Experience Manager
Not analysed yet 12 Jun 2020
CVE-2020-9647 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based)…
- Adobe Experience Manager
Not analysed yet 12 Jun 2020
CVE-2020-9644 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored)…
- Adobe Experience Manager
Not analysed yet 12 Jun 2020
CVE-2020-9648 CVE record

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability.
- Adobe Experience Manager
Not analysed yet 12 Jun 2020
CVE-2020-9643 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery…
- Adobe Experience Manager
Not analysed yet 12 Jun 2020
CVE-2020-9645 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5 and earlier have a blind server-side request…
- Adobe Experience Manager
Not analysed yet 12 Jun 2020
CVE-2020-3769 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery…
- Adobe Experience Manager
Not analysed yet 25 Mar 2020
CVE-2020-3741 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5…
- Adobe Experience Manager
Not analysed yet 13 Feb 2020
CVE-2019-16467 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1…
- Adobe Experience Manager
Not analysed yet 15 Jan 2020
CVE-2019-16468 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1…
- Adobe Experience Manager
Not analysed yet 15 Jan 2020
CVE-2019-16469 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1…
- Adobe Experience Manager
Not analysed yet 15 Jan 2020
CVE-2019-16466 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1…
- Adobe Experience Manager
Not analysed yet 15 Jan 2020
CVE-2019-8234 CVE record

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability.
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8088 CVE record

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability.
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8087 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4…
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8086 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4…
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8085 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4…
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8084 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.5, 6.4…
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8083 CVE record

Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability.
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8082 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.4…
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8081 CVE record

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability.
- Adobe Experience Manager
Not analysed yet 25 Oct 2019
CVE-2019-8080 CVE record

Adobe Experience Manager versions 6.4 and 6.3 have a stored cross site scripting vulnerability.
- Adobe Experience Manager
Not analysed yet 24 Oct 2019
CVE-2019-8079 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1…
- Adobe Experience Manager
Not analysed yet 24 Oct 2019
CVE-2019-8078 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.4…
- Adobe Experience Manager
Not analysed yet 24 Oct 2019
CVE-2019-7964 CVE record

Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability.
- Adobe Experience Manager
Not analysed yet 16 Aug 2019
CVE-2019-7953 CVE record

Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability.
- Adobe Experience Manager
Not analysed yet 18 Jul 2019
CVE-2019-7954 CVE record

Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability.
- Adobe Experience Manager
Not analysed yet 18 Jul 2019
CVE-2019-7955 CVE record

Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability.
- Adobe Experience Manager
Not analysed yet 18 Jul 2019
CVE-2018-19727 CVE record

Adobe Experience Manager: Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1…
- Adobe Experience Manager
Not analysed yet 28 Jan 2019