Known vulnerabilities in Adobe Experience Manager 6.5.0 HOTFIX 30379

Vendor: Adobe
Version: 6.5.0 HOTFIX 30379
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 1037
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Experience Manager version 6.5.0 HOTFIX 30379 Adobe Experience Manager 6.5.0 HOTFIX 30379 is affected by 1037 vulnerabilities: 4 high, 237 medium, 796 low Critical High Medium Low

Vulnerabilities (1037)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137611 - Server-Side Request Forgery (SSRF)
CVE-2026-48259
CWE-918 Medium
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137612 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-48359
CWE-611 Medium
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137613 - Missing Authentication for Critical Function
CVE-2026-48252
CWE-306 High
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137614 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-48310
CWE-22 High
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48263
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48253
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48355
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48254
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137619 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48255
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137620 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48257
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48260
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137622 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48261
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137623 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48262
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU134128 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48258
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969
#VU134106 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47982
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969
#VU134107 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47983
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969
#VU134108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47985
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969
#VU134109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47986
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969
#VU134110 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47987
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969
#VU134111 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47989
CWE-79 Low
No
No
6.5.25.0 09.06.2026 SB2026060969


Showing elements 1 - 20 out of 1037