Known vulnerabilities in Adobe Experience Manager 6.0 HOTFIX 25133 - page 39

Vendor: Adobe
Version: 6.0 HOTFIX 25133
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 800
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Experience Manager version 6.0 HOTFIX 25133 Adobe Experience Manager 6.0 HOTFIX 25133 is affected by 800 vulnerabilities: 2 high, 85 medium, 713 low Critical High Medium Low

Vulnerabilities (800)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70295 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-44488
CWE-601 Low
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70294 - Improper Access Control
CVE-2022-42351
CWE-284 Low
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70264 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42346
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70265 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30679
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70266 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42348
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70267 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42349
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42350
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35693
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42354
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35694
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42356
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42357
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70275 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35695
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70276 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35696
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU70277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-42360
CWE-79 Medium
No
No
6.5.15.0 14.12.2022 SB2022121407
#VU59006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43764
CWE-79 Low
No
No
6.5.11.0 15.12.2021 SB2021121533
#VU59002 - Improper input validation
CVE-2021-43762
CWE-20 Medium
No
No
6.5.11.0 15.12.2021 SB2021121533
#VU59001 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-40722
CWE-611 High
No
No
6.5.11.0 15.12.2021 SB2021121533
#VU59000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43761
CWE-79 Medium
No
No
6.5.11.0 15.12.2021 SB2021121533
#VU59003 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43765
CWE-79 Medium
No
No
6.5.11.0 15.12.2021 SB2021121533


Showing elements 761 - 780 out of 800