Filtered by vendor Adobe
                         Subscriptions
                    
                    
                
                        Filtered by product Experience Manager
                         Subscriptions
                    
                    
                
                    Total
                    938 CVE
                
            | CVE | Vendors | Products | Updated | CVSS v3.1 | 
|---|---|---|---|---|
| CVE-2020-9645 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2020-9644 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 5.4 Medium | 
| Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser. | ||||
| CVE-2020-9643 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2020-3769 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2020-3741 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service. | ||||
| CVE-2020-24445 | 1 Adobe | 2 Experience Manager, Experience Manager Cloud Service | 2024-11-21 | 9 Critical | 
| AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. | ||||
| CVE-2019-8234 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.5 Medium | 
| Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8088 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 9.8 Critical | 
| Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. | ||||
| CVE-2019-8087 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8086 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8085 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.1 Medium | 
| Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8084 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.1 Medium | 
| Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8083 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.1 Medium | 
| Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8082 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8081 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 7.5 High | 
| Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8080 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.1 Medium | 
| Adobe Experience Manager versions 6.4 and 6.3 have a stored cross site scripting vulnerability. Successful exploitation could lead to privilege escalation. | ||||
| CVE-2019-8079 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.1 Medium | 
| Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-8078 | 1 Adobe | 1 Experience Manager | 2024-11-21 | 6.1 Medium | 
| Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. | ||||
| CVE-2019-7964 | 1 Adobe | 1 Experience Manager | 2024-11-21 | N/A | 
| Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation could lead to remote code execution. | ||||
| CVE-2019-7955 | 1 Adobe | 1 Experience Manager | 2024-11-21 | N/A | 
| Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user. | ||||