VendorsAdobeexperience_managerall versions
Vulnerabilities

Adobe Experience Manager

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

1299CVEs
CVE-2021-44178
Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html
Published 2022-01-13 · Modified
6.1EPSS 0.015
CVE-2021-40714
Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter
Published 2021-09-27 · Modified
6.1EPSS 0.011
CVE-2024-36216
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2024-06-13 · Modified
6.1EPSS 0.004
CVE-2025-47049
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2025-06-10 · Analyzed
6.1EPSS 0.003
CVE-2025-47094
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2025-06-10 · Analyzed
6.1EPSS 0.003
CVE-2026-47991
Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Published 2026-06-09 · Analyzed
6.1EPSS 0.002
CVE-2021-40713
Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack
Published 2021-09-27 · Modified
5.9EPSS 0.010
CVE-2022-28851
AEM Reflected XSS Arbitrary code execution
Published 2022-09-30 · Modified
5.4EPSS 0.368
CVE-2025-54252
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-09-09 · Analyzed
5.4EPSS 0.065
CVE-2020-9644
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.
Published 2020-06-12 · Modified
5.4EPSS 0.018
CVE-2021-40711
Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution
Published 2021-09-27 · Modified
5.4EPSS 0.015
CVE-2024-43733
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-43738
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-43754
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52822
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52823
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52837
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52838
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52839
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52840
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2024-52844
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.009
CVE-2022-38438
AEM Reflected XSS Arbitrary code execution
Published 2022-09-23 · Modified
5.4EPSS 0.009
CVE-2024-36141
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.008
CVE-2024-36197
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.008
CVE-2024-26091
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.008
CVE-2024-26115
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.008
CVE-2024-26116
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.008
CVE-2024-52860
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-12-10 · Analyzed
5.4EPSS 0.008
CVE-2022-35694
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-35696
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-42360
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-42366
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-42367
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-44462
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-44468
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-44469
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2022-44473
AEM Reflected XSS Arbitrary code execution
Published 2022-12-19 · Modified
5.4EPSS 0.008
CVE-2024-26092
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.008
CVE-2024-26089
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.007
CVE-2024-26090
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2024-06-13 · Modified
5.4EPSS 0.007
← Prev4 / 33Next →