AE
Product
Adobe Experience Manager 6.5 LTS
by Adobe · last CVE Oct 13, 2026
202
CVEs
0
On KEV
10.0
Max CVSS
22
New 30D
Severity mix
Critical 14High 4Medium 181Low 3
Watch

Add Adobe Experience Manager 6.5 LTS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90532
10.0
1%
Oct 13
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through 6.5 LTS SP3
CVE-2026-48383
10.0
1%
Oct 13
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through 6.5 LTS SP3
CVE-2026-48382
10.0
1%
Oct 13
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through 6.5 LTS SP3
CVE-2026-75732
9.9
1%
Oct 13
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through 6.5 LTS SP3
CVE-2026-103848
9.9
1%
Oct 13
Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Affected: through 6.5 LTS SP3
CVE-2026-19232
9.9
1%
Sep 8
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through SP2
CVE-2026-90531
9.6
1%
Oct 13
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Affected: through 6.5 LTS SP3
CVE-2026-48259
9.6
1%
Jul 14
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: through SP2
CVE-2026-48359
9.6
1%
Jul 14
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Affected: through SP2
CVE-2026-83662
9.3
1%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-106630
9.3
1%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-106629
9.3
1%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-34691
9.3
0%
Jun 9
Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through SP1
CVE-2026-106626
9.1
1%
Oct 13
Adobe Experience Manager | Improper Input Validation (CWE-20)
Affected: through 6.5 LTS SP3
CVE-2026-48310
8.6
1%
Jul 14
Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: through SP2
CVE-2026-48252
8.6
1%
Jul 14
Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)
Affected: through SP2
CVE-2026-34693
8.0
0%
Jun 9
Adobe Experience Manager Forms JEE | Cross-site Scripting (Reflected XSS) (CWE-79)
Affected: through SP1
CVE-2026-106634
7.7
0%
Oct 13
Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: through 6.5 LTS SP3
CVE-2026-47991
6.1
0%
Jun 9
Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Affected: through SP1
CVE-2026-83960
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-83958
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-110082
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-110081
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-110074
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-110037
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-109415
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-106633
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-106632
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-106631
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-106628
5.4
0%
Oct 13
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5 LTS SP3
CVE-2026-84397
5.4
1%
Sep 16
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through SP2
CVE-2026-71357
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75678
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-71565
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75687
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75672
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75734
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through SP2
CVE-2026-75706
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75730
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through SP2
CVE-2026-75719
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75707
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75690
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75715
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2025-64838
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through SP2
CVE-2026-75646
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75640
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75643
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through SP2
CVE-2026-19612
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-75660
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
CVE-2026-19479
5.4
0%
Sep 8
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through SP2
Page 1 of 5 · 202 total
12…5