VendorsAdobeexperience_managerall versions
Vulnerabilities

Adobe Experience Manager

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1265CVEs
CVE-2026-34694
Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-06-09 · Analyzed
4.8EPSS 0.004
CVE-2025-46911
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-06-10 · Analyzed
4.8EPSS 0.004
CVE-2025-46884
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-06-10 · Analyzed
4.8EPSS 0.004
CVE-2025-46913
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-06-10 · Analyzed
4.8EPSS 0.003
CVE-2024-41842
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2024-08-23 · Analyzed
4.8EPSS 0.003
CVE-2025-64872
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-12-10 · Analyzed
4.8EPSS 0.002
CVE-2024-43732
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
4.6EPSS 0.009
CVE-2025-46920
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-06-10 · Analyzed
4.6EPSS 0.003
CVE-2025-54251
Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
Published 2025-09-09 · Analyzed
4.3EPSS 0.017
CVE-2022-42351
AEM Incorrect Authorization Security feature bypass
Published 2022-12-19 · Modified
4.3EPSS 0.009
CVE-2024-43731
Adobe Experience Manager | Improper Authorization (CWE-285)
Published 2024-12-10 · Analyzed
4.3EPSS 0.009
CVE-2024-43716
Adobe Experience Manager | Improper Access Control (CWE-284)
Published 2024-12-10 · Analyzed
4.3EPSS 0.006
CVE-2024-43717
Adobe Experience Manager | Improper Access Control (CWE-284)
Published 2024-12-10 · Analyzed
4.3EPSS 0.006
CVE-2024-41849
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-08-23 · Analyzed
4.1EPSS 0.004
CVE-2024-43755
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-12-10 · Analyzed
3.5EPSS 0.009
CVE-2024-52831
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-12-10 · Analyzed
3.5EPSS 0.009
CVE-2023-48608
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2023-12-15 · Modified
3.5EPSS 0.008
CVE-2024-26126
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-06-13 · Modified
3.5EPSS 0.007
CVE-2024-26127
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-06-13 · Modified
3.5EPSS 0.007
CVE-2024-36226
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-06-13 · Modified
3.5EPSS 0.007
CVE-2026-75726
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2026-09-08 · Analyzed
3.5EPSS 0.005
CVE-2026-48288
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2026-06-09 · Analyzed
3.5EPSS 0.005
CVE-2026-48289
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2026-06-09 · Analyzed
3.5EPSS 0.005
CVE-2024-41839
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2024-07-23 · Modified
3.5EPSS 0.004
CVE-2025-47096
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2025-06-10 · Analyzed
3.5EPSS 0.003
← Prev32 / 32