Adobe Experience Manager 6.5 (Adobe) - vulnerabilities (CVEs)

248 CVEs, 35 in the last 30 days, 1 known versions, newest CVE from 2026-10-13. Vendor: Adobe.

CVEs of Adobe Experience Manager 6.5

CVE-2026-90532 - CVSS 10 (critical), 2026-10-13: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-90531 - CVSS 9.6 (critical), 2026-10-13: Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege…
CVE-2026-83960 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-83958 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-83662 - CVSS 9.3 (critical), 2026-10-13: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious…
CVE-2026-75732 - CVSS 9.9 (critical), 2026-10-13: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-48398 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-48383 - CVSS 10 (critical), 2026-10-13: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-48382 - CVSS 10 (critical), 2026-10-13: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-110084 - CVSS 7.1 (high), 2026-10-13: Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A…
CVE-2026-110083 - CVSS 7.1 (high), 2026-10-13: Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could…
CVE-2026-110082 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to…
CVE-2026-110081 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-110080 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110079 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110078 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110077 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110076 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110075 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110074 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-110073 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-110037 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-109415 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-107682 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-107305 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-106634 - CVSS 7.7 (high), 2026-10-13: Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in…
CVE-2026-106633 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-106632 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-106631 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-106630 - CVSS 9.3 (critical), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-106629 - CVSS 9.3 (critical), 2026-10-13: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-106628 - CVSS 5.4 (medium), 2026-10-13: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-106626 - CVSS 9.1 (critical), 2026-10-13: Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-105895 - CVSS 9.9 (critical), 2026-10-13: Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103848 - CVSS 9.9 (critical), 2026-10-13: Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could…
CVE-2026-84397 - CVSS 5.4 (medium), 2026-09-16: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75678 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-71357 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-71565 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75687 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75672 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75734 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75706 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75719 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75730 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75707 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75690 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75715 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2025-64838 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75646 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75640 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75643 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75726 - CVSS 3.5 (low), 2026-09-08: Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker…
CVE-2026-19612 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-19479 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75660 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75735 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75637 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75705 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75694 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75741 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75679 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2025-64830 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75685 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75729 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75677 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75671 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75642 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75667 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75644 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75636 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75704 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75708 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2025-64866 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2025-64854 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2025-64589 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75742 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75635 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75713 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75739 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75666 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-72627 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-19644 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75674 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75709 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75652 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2025-64610 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75661 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75733 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75691 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75647 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75725 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2025-64584 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75669 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75740 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-75710 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75668 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75716 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-71388 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…
CVE-2026-75683 - CVSS 5.4 (medium), 2026-09-08: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM…