Known vulnerabilities in Adobe Experience Manager - page 12

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 1075
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Experience Manager Adobe Experience Manager is affected by 1075 known vulnerabilities: 6 high, 241 medium, 828 low Critical High Medium Low

Vulnerabilities (1075)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64538
CWE-79 Low
No
No
6.5.24.0 11.03.2026 SB2025121042
#VU119583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64576
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64577
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU119585 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64578
CWE-79 Low
No
No
6.5.0.0.61551.0, 6.5.24.0 10.12.2025 SB2025121042
#VU115063 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54252
CWE-79 Low
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115062 - XML Injection
CVE-2025-54251
CWE-91 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115061 - Improper input validation
CVE-2025-54250
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115060 - Server-Side Request Forgery (SSRF)
CVE-2025-54249
CWE-918 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115059 - Improper input validation
CVE-2025-54247
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115058 - Incorrect Authorization
CVE-2025-54246
CWE-863 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU115057 - Improper input validation
CVE-2025-54248
CWE-20 Medium
No
No
6.5.23.0.61551 09.09.2025 SB2025090969
#VU110944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47014
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47015
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110946 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47016
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110947 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47017
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110948 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47019
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110949 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47020
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47021
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47029
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102
#VU110800 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47022
CWE-79 Low
No
No
6.5.23.0 10.06.2025 SB20250610102


Showing elements 221 - 240 out of 1075