AE
Product
Adobe Experience Manager 6.5 LTS
202
CVEs
0
On KEV
10.0
Max CVSS
22
New 30D
Severity mix
Critical 14High 4Medium 181Low 3
Watch
Add Adobe Experience Manager 6.5 LTS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-90532 | 10.0 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) Affected: through 6.5 LTS SP3 |
| CVE-2026-48383 | 10.0 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) Affected: through 6.5 LTS SP3 |
| CVE-2026-48382 | 10.0 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) Affected: through 6.5 LTS SP3 |
| CVE-2026-75732 | 9.9 | Oct 13 | Adobe Experience Manager | Incorrect Authorization (CWE-863) Affected: through 6.5 LTS SP3 |
| CVE-2026-103848 | 9.9 | Oct 13 | Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) Affected: through 6.5 LTS SP3 |
| CVE-2026-19232 | 9.9 | Sep 8 | Adobe Experience Manager | Incorrect Authorization (CWE-863) Affected: through SP2 |
| CVE-2026-90531 | 9.6 | Oct 13 | Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Affected: through 6.5 LTS SP3 |
| CVE-2026-48259 | 9.6 | Jul 14 | Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through SP2 |
| CVE-2026-48359 | 9.6 | Jul 14 | Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Affected: through SP2 |
| CVE-2026-83662 | 9.3 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-106630 | 9.3 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-106629 | 9.3 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-34691 | 9.3 | Jun 9 | Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through SP1 |
| CVE-2026-106626 | 9.1 | Oct 13 | Adobe Experience Manager | Improper Input Validation (CWE-20) Affected: through 6.5 LTS SP3 |
| CVE-2026-48310 | 8.6 | Jul 14 | Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: through SP2 |
| CVE-2026-48252 | 8.6 | Jul 14 | Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306) Affected: through SP2 |
| CVE-2026-34693 | 8.0 | Jun 9 | Adobe Experience Manager Forms JEE | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through SP1 |
| CVE-2026-106634 | 7.7 | Oct 13 | Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: through 6.5 LTS SP3 |
| CVE-2026-47991 | 6.1 | Jun 9 | Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) Affected: through SP1 |
| CVE-2026-83960 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-83958 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-110082 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-110081 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-110074 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-110037 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-109415 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-106633 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-106632 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-106631 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-106628 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5 LTS SP3 |
| CVE-2026-84397 | 5.4 | Sep 16 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-71357 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75678 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-71565 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75687 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75672 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75734 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75706 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75730 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75719 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75707 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75690 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75715 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2025-64838 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75646 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75640 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75643 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-19612 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-75660 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
| CVE-2026-19479 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through SP2 |
