VendorsAdobeexperience_manager6.5
Vulnerabilities

Adobe Experience Manager 6.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

342CVEs
CVE-2019-7964
Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation could lead to remote code execution.
Published 2019-08-16 · Modified
10.0EPSS 0.102
CVE-2026-19232
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Published 2026-09-08 · Analyzed
9.9EPSS 0.006
CVE-2019-8088
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2019-10-25 · Modified
9.8EPSS 0.058
CVE-2026-48359
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2026-07-14 · Analyzed
9.6EPSS 0.010
CVE-2026-48259
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2026-07-14 · Analyzed
9.6EPSS 0.009
CVE-2026-34691
Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-06-09 · Analyzed
9.3EPSS 0.007
CVE-2025-64537
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2025-12-10 · Analyzed
9.3EPSS 0.007
CVE-2025-64538
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2025-12-10 · Analyzed
9.3EPSS 0.006
CVE-2025-64539
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Published 2025-12-10 · Analyzed
9.3EPSS 0.005
CVE-2026-48310
Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2026-07-14 · Analyzed
8.6EPSS 0.010
CVE-2026-48252
Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)
Published 2026-07-14 · Analyzed
8.6EPSS 0.009
CVE-2026-34693
Adobe Experience Manager Forms JEE | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2026-06-09 · Analyzed
8.0EPSS 0.006
CVE-2025-54248
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2025-09-09 · Analyzed
7.7EPSS 0.054
CVE-2019-8086
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2019-10-25 · Modified
7.5EPSS 0.225
CVE-2019-8087
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2019-10-25 · Modified
7.5EPSS 0.036
CVE-2019-8081
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2019-10-25 · Modified
7.5EPSS 0.033
CVE-2020-3741
Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service.
Published 2020-02-13 · Modified
7.5EPSS 0.032
CVE-2025-54249
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2025-09-09 · Analyzed
6.5EPSS 0.019
CVE-2025-54247
Adobe Experience Manager | Improper Input Validation (CWE-20)
Published 2025-09-09 · Analyzed
6.5EPSS 0.005
CVE-2025-54246
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Published 2025-09-09 · Analyzed
6.5EPSS 0.004
CVE-2019-8083
Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2019-10-25 · Modified
6.1EPSS 0.015
CVE-2019-8084
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2019-10-25 · Modified
6.1EPSS 0.015
CVE-2019-16467
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2020-01-15 · Modified
6.1EPSS 0.015
CVE-2019-8085
Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
Published 2019-10-25 · Modified
6.1EPSS 0.015
CVE-2026-47991
Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Published 2026-06-09 · Analyzed
6.1EPSS 0.005
CVE-2025-54252
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-09-09 · Analyzed
5.4EPSS 0.049
CVE-2026-27237
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27236
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27239
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27235
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27233
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27240
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27234
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27232
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27230
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27229
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27241
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27231
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27228
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
CVE-2026-27244
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.004
1 / 9Next →