EM
Product
Experience Manager
1,272
CVEs
0
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 19High 30Medium 451Low 0
Watch
Add Experience Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64566 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64565 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64564 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64563 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64562 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64560 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64559 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64558 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64557 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64556 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64555 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64554 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64553 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64551 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64550 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64549 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64548 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64547 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64546 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64545 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64544 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64543 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-64541 | 5.4 | Dec 10 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.24.0; before 2025.12.0; 6.5 |
| CVE-2025-61797 | 5.4 | Oct 14 | Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: 6.5.22.0 |
| CVE-2025-61796 | 5.4 | Oct 14 | Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: 6.5.22.0 |
| CVE-2025-54272 | 5.4 | Oct 14 | Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: 6.5.22.0 |
| CVE-2025-54252 | 5.4 | Sep 9 | Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to… Affected: through 6.5.23.0; through 2025.8.0; 6.5; 6.5 |
| CVE-2025-47054 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46998 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46962 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46936 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46932 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46856 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46852 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46849 | 5.4 | Aug 20 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-46958 | 5.4 | Aug 5 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-47001 | 5.4 | Jul 30 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.22.0; before 2025.5.0 |
| CVE-2025-47061 | 5.4 | Jul 24 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5 |
| CVE-2025-46996 | 5.4 | Jul 24 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5 |
| CVE-2025-46993 | 5.4 | Jul 24 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5 |
| CVE-2025-47053 | 5.4 | Jul 16 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Affected: before 6.5.23.0; before 2025.5 |
| CVE-2025-46959 | 5.4 | Jul 16 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Affected: before 6.5.23.0; before 2025.5 |
| CVE-2025-49547 | 5.4 | Jul 8 | Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: 6.5.22.0 |
| CVE-2025-49534 | 5.4 | Jul 8 | Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: 6.5.22.0 |
| CVE-2025-47117 | 5.4 | Jun 10 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-47116 | 5.4 | Jun 10 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-47115 | 5.4 | Jun 10 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-47114 | 5.4 | Jun 10 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-47113 | 5.4 | Jun 10 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
| CVE-2025-47093 | 5.4 | Jun 10 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject… Affected: before 6.5.23.0; before 2025.5.0 |
The 500 most important CVEs for this product (exploited first, then by severity)