Adobe Experience Manager as a Cloud Service vulnerabilities

Product

Adobe Experience Manager as a Cloud Service

by Adobe · last CVE Oct 13, 2026

185

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities185 In the news0 Timeline

Severity mix

Critical 9High 2Medium 171Low 3

Severity

All severities185 Critical9 High2 Medium171 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Adobe Experience Manager as a Cloud Service to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-90532	10.0	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 2026.9.28187
CVE-2026-48383	10.0	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 2026.9.28187
CVE-2026-48382	10.0	1%	Oct 13	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 2026.9.28187
CVE-2026-19232	9.9	1%	Sep 8	Adobe Experience Manager \| Incorrect Authorization (CWE-863) Affected: through 2026.7.0
CVE-2026-90531	9.6	1%	Oct 13	Adobe Experience Manager \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Affected: through 2026.9.28187
CVE-2026-48259	9.6	1%	Jul 14	Adobe Experience Manager \| Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 2026.5.0
CVE-2026-48359	9.6	1%	Jul 14	Adobe Experience Manager \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Affected: through 2026.5.0
CVE-2026-83662	9.3	1%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 2026.9.28187
CVE-2026-106626	9.1	1%	Oct 13	Adobe Experience Manager \| Improper Input Validation (CWE-20) Affected: through 2026.9.28187
CVE-2026-48310	8.6	1%	Jul 14	Adobe Experience Manager \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: through 2026.5.0
CVE-2026-48252	8.6	1%	Jul 14	Adobe Experience Manager \| Missing Authentication for Critical Function (CWE-306) Affected: through 2026.5.0
CVE-2026-47991	6.1	0%	Jun 9	Adobe Experience Manager \| URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) Affected: through 2026.4.0
CVE-2026-83960	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.9.28187
CVE-2026-83958	5.4	0%	Oct 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.9.28187
CVE-2026-84397	5.4	1%	Sep 16	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-71357	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75678	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-71565	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75687	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75672	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75734	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75706	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75730	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75719	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75707	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75690	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75715	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2025-64838	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75646	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75640	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75643	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-19612	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75660	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-19479	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75735	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75637	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75705	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75694	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75741	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75679	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2025-64830	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75729	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75685	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75677	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75642	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75671	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75667	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75636	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75644	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 2026.7.0
CVE-2026-75704	5.4	0%	Sep 8	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 2026.7.0