Known vulnerabilities in Adobe Experience Manager 6.4 - page 49

Vendor: Adobe
Version: 6.4
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 982
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Experience Manager version 6.4 Adobe Experience Manager 6.4 is affected by 982 vulnerabilities: 3 high, 238 medium, 741 low Critical High Medium Low

Vulnerabilities (982)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28946 - Server-Side Request Forgery (SSRF)
CVE-2020-9645
CWE-918 Low
No
No
6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9651
CWE-79 Low
No
No
6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9644
CWE-79 Medium
No
No
6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9648
CWE-79 Low
No
No
6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28941 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9647
CWE-79 Low
No
No
6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28940 - Server-Side Request Forgery (SSRF)
CVE-2020-9643
CWE-918 Medium
No
No
6.3.3.8, 6.4.8.1 10.06.2020 SB2020061034
#VU26172 - Server-Side Request Forgery (SSRF)
CVE-2020-3769
CWE-918 Medium
No
No
6.3.3.8, 6.4.8.0, 6.5.4.0 18.03.2020 SB2020031815
#VU25255 - Resource exhaustion
CVE-2020-3741
CWE-400 Medium
No
No
6.4.0 HOTFIX 31868, 6.5.0 HOTFIX 31870 12.02.2020 SB2020021171
#VU24243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16468
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU24242 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16467
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU24241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16466
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU20149 - Improper Authentication
CVE-2019-7964
CWE-287 High
No
No
6.4.0 HOTFIX 30379, 6.5.0 HOTFIX 30379 13.08.2019 SB2019081316
#VU17117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19727
CWE-79 Low
No
No
6.3.3.2, 6.4.3.0 22.01.2019 SB2019012204
#VU17116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19726
CWE-79 Low
No
No
6.2-SP1-CFP15, 6.3.2.2, 6.4.1.0 22.01.2019 SB2019012204
#VU15283 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15973
CWE-79 Low
No
No
6.0 HOTFIX 25133, 6.1-SP2-CFP17, 6.2-SP1-CFP15, 6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU15282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15972
CWE-79 Low
No
No
6.1-SP2-CFP17, 6.2-SP1-CFP15, 6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU15281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15971
CWE-79 Low
No
No
6.4.2.0 10.10.2018 SB2018101012
#VU15280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15970
CWE-79 Low
No
No
6.4.2.0 10.10.2018 SB2018101012
#VU15279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15969
CWE-79 Low
No
No
6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU14340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5005
CWE-79 Low
No
No
- 14.08.2018 SB2018081407


Showing elements 961 - 980 out of 982