Known vulnerabilities in Adobe Experience Manager 6.4.7.0 - page 8

Vendor: Adobe
Version: 6.4.7.0
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 964
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Experience Manager version 6.4.7.0 Adobe Experience Manager 6.4.7.0 is affected by 964 vulnerabilities: 2 high, 232 medium, 730 low Critical High Medium Low

Vulnerabilities (964)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64538
CWE-79 Low
No
No
6.5.24.0 11.03.2026 SB2025121042
#VU119583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64576
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64577
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64578
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119586 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64579
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119587 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64580
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119588 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64581
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119589 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64582
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119590 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64585
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64586
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119563 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64583
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU115063 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54252
CWE-79 Low
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115062 - XML Injection
CVE-2025-54251
CWE-91 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115061 - Improper input validation
CVE-2025-54250
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115060 - Server-Side Request Forgery (SSRF)
CVE-2025-54249
CWE-918 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115059 - Improper input validation
CVE-2025-54247
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115058 - Incorrect Authorization
CVE-2025-54246
CWE-863 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115057 - Improper input validation
CVE-2025-54248
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU110944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47014
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47029
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102


Showing elements 141 - 160 out of 964