EM
Product
Experience Manager
1,272
CVEs
0
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 19High 30Medium 451Low 0
Watch
Add Experience Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11296 | 6.1 | Dec 9 | An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0 Affected: 6.0.0; 6.1.0; 6.2.0; 6.3.0 |
| CVE-2016-7884 | 6.1 | Dec 15 | Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks Affected: through 6.1.0 |
| CVE-2016-7883 | 6.1 | Dec 15 | Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks Affected: 6.2.0 |
| CVE-2016-7882 | 6.1 | Dec 15 | Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks Affected: through 6.2.0 |
| CVE-2016-6933 | 6.1 | Dec 15 | Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site… Affected: 6.0.0; 6.1.0; 6.2.0 |
| CVE-2016-4170 | 6.1 | Aug 9 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 5.6.1; 6.0.0; 6.1.0; 6.2.0 |
| CVE-2016-4168 | 6.1 | Aug 9 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 5.6.1; 6.0.0; 6.1.0 |
| CVE-2016-0955 | 6.1 | Feb 10 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field… Affected: 6.1.0 |
| CVE-2021-40713 | 5.9 | Sep 27 | Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper certificate validation vulnerability in the cold storage component Affected: through 6.5.9.0 |
| CVE-2026-106631 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5; through 6.5.25.0 |
| CVE-2026-106628 | 5.4 | Oct 13 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5; through 6.5.25.0; through 2026.9.28187 |
| CVE-2026-71357 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75678 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-71565 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75687 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75672 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75734 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75706 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75730 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75719 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75707 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75690 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75715 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2025-64838 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75646 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75640 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75643 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-19612 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75660 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-19479 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75735 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75637 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75705 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75694 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75741 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75679 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2025-64830 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75729 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75685 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75677 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75642 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75671 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75667 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75636 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75644 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75704 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2026-75708 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2025-64854 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2025-64866 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
| CVE-2025-64589 | 5.4 | Sep 8 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: before 6.5; before 6.5.25.0; before 2026.8.0; 6.5; 6.5; 6.5 |
The 500 most important CVEs for this product (exploited first, then by severity)