Known vulnerabilities in Adobe Experience Manager 6.5.0 HOTFIX 31870 - page 12

Vendor: Adobe
Version: 6.5.0 HOTFIX 31870
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 1032
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Experience Manager version 6.5.0 HOTFIX 31870 Adobe Experience Manager 6.5.0 HOTFIX 31870 is affected by 1032 vulnerabilities: 4 high, 232 medium, 796 low Critical High Medium Low

Vulnerabilities (1032)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64538
CWE-79 Low
No
No
6.5.24.0 11.03.2026 SB2025121042
#VU115063 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54252
CWE-79 Low
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115062 - XML Injection
CVE-2025-54251
CWE-91 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115061 - Improper input validation
CVE-2025-54250
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115060 - Server-Side Request Forgery (SSRF)
CVE-2025-54249
CWE-918 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115059 - Improper input validation
CVE-2025-54247
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115058 - Incorrect Authorization
CVE-2025-54246
CWE-863 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115057 - Improper input validation
CVE-2025-54248
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU110944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47014
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47015
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110946 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47016
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110947 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47017
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110948 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47019
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110949 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47020
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47021
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110951 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47026
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47029
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110800 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47022
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110801 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47025
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110802 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47027
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102


Showing elements 221 - 240 out of 1032