Known vulnerabilities in Adobe Experience Manager 6.5.0 HOTFIX 30379 - page 6

Vendor: Adobe
Version: 6.5.0 HOTFIX 30379
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 1145
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Experience Manager version 6.5.0 HOTFIX 30379 Adobe Experience Manager 6.5.0 HOTFIX 30379 is affected by 1145 vulnerabilities: 5 high, 242 medium, 898 low Critical High Medium Low

Vulnerabilities (1145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64868
CWE-79 Low
No
No
6.5.25.0 09.09.2026 SB2026090989
#VU148827 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64866
CWE-79 Low
No
No
6.5.25.0 09.09.2026 SB2026090989
#VU148828 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-75729
CWE-79 Low
No
No
6.5.25.0 09.09.2026 SB2026090989
#VU148829 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64854
CWE-79 Low
No
No
6.5.25.0 09.09.2026 SB2026090989
#VU148830 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-75730
CWE-79 Low
No
No
6.5.25.0 09.09.2026 SB2026090989
#VU148751 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-71388
CWE-79 Low
No
No
6.5.25.0 09.09.2026 SB2026090989
#VU145827 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34693
CWE-79 Medium
No
No
6.5.25.0 26.08.2026 SB2026082666
#VU145828 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34694
CWE-79 Low
No
No
6.5.25.0 26.08.2026 SB2026082666
#VU145826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34691
CWE-79 Medium
No
No
6.5.25.0 26.08.2026 SB2026082666
#VU137611 - Server-Side Request Forgery (SSRF)
CVE-2026-48259
CWE-918 Medium
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137612 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-48359
CWE-611 Medium
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137613 - Missing Authentication for Critical Function
CVE-2026-48252
CWE-306 High
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137614 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-48310
CWE-22 High
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137615 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48263
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48253
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48355
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137618 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48254
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU137619 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48255
CWE-79 Low
No
No
6.5.25.0.43971, 2026.6.0 15.07.2026 SB2026071511
#VU126373 - Out-of-bounds write
CVE-2026-27258
CWE-787 Medium
No
No
6.5.25.0 17.04.2026 SB2026041704
SB2026090989
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Public exploit available
Exploited
6.5.25.0 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 33 more


Showing elements 101 - 120 out of 1145