Adobe Experience Manager vulnerabilities
9 known vulnerabilities in Adobe Experience Manager from Adobe. 9 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
Adobe Experience Manager: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page t
- 9.3 Critical severity
Adobe Experience Manager: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page t
- 9.3 Critical severity
Adobe Experience Manager: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page t
- 7.7 High severity
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input…
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain u
- 8.6 High severity
Adobe Experience Manager: Improper Restriction of XML External Entity Reference
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive
- 10.0 Critical severity
Adobe Experience Manager Forms Code Execution Exploited
Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of t
- 8.7 High severity
Adobe Experience Manager: Improper Authorization
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorize
- 8.7 High severity
Adobe Experience Manager: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager versions 6.5.22 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be exe
- 9.8 Critical severity
Adobe Experience Manager: Improper Access Control
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain disclose informatio