Adobe Experience Manager 6.5 vulnerabilities | LiveThreat CVE Feed

Product

Adobe Experience Manager 6.5

by Adobe · last CVE Oct 13, 2026

215

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities215 In the news0 Timeline

Severity mix

Critical 15High 6Medium 191Low 3

Severity

All severities215 Critical15 High6 Medium191 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Adobe Experience Manager 6.5 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-90532	10.0	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 6.5.25
CVE-2026-48383	10.0	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 6.5.25
CVE-2026-48382	10.0	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 6.5.25
CVE-2026-75732	9.9	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 6.5.25
CVE-2026-105895	9.9	1%	Oct 13	Adobe Experience Manager \| Improper Input Validation (CWE-20) Affected: through 6.5.25
CVE-2026-103848	9.9	1%	Oct 13	Adobe Experience Manager \| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) Affected: through 6.5.25
CVE-2026-19232	9.9	1%	Sep 8	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 6.5.24
CVE-2026-90531	9.6	1%	Oct 13	Adobe Experience Manager \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Affected: through 6.5.25
CVE-2026-48259	9.6	1%	Jul 14	Adobe Experience Manager \| Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 6.5.25
CVE-2026-48359	9.6	1%	Jul 14	Adobe Experience Manager \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Affected: through 6.5.25
CVE-2026-83662	9.3	1%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-106630	9.3	1%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-106629	9.3	1%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-34691	9.3	0%	Jun 9	Adobe Experience Manager Forms JEE \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-106626	9.1	1%	Oct 13	Adobe Experience Manager \| Improper Input Validation (CWE-20) Affected: through 6.5.25
CVE-2026-48310	8.6	1%	Jul 14	Adobe Experience Manager \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: through 6.5.25
CVE-2026-48252	8.6	1%	Jul 14	Adobe Experience Manager \| Missing Authentication for Critical Function (CWE-306) Affected: through 6.5.25
CVE-2026-34693	8.0	0%	Jun 9	Adobe Experience Manager Forms JEE \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-106634	7.7	0%	Oct 13	Adobe Experience Manager \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: through 6.5.25
CVE-2026-110084	7.1	0%	Oct 13	Adobe Experience Manager \| XML Injection (aka Blind XPath Injection) (CWE-91) Affected: through 6.5.25
CVE-2026-110083	7.1	0%	Oct 13	Adobe Experience Manager \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 6.5.25
CVE-2026-47991	6.1	0%	Jun 9	Adobe Experience Manager \| URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) Affected: through 6.5.24
CVE-2026-83960	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-83958	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-48398	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110082	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110081	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110080	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110079	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110078	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110077	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110076	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110075	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110074	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110073	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-110037	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-109415	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-107682	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-107305	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-106633	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-106632	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-106631	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-106628	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.25
CVE-2026-84397	5.4	1%	Sep 16	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-71357	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-75678	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-71565	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-75687	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-75672	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24
CVE-2026-75734	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24