Known vulnerabilities in Adobe Experience Manager - page 52

Vendor: Adobe
Software: Adobe Experience Manager
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Website: https://www.adobe.com
Total vulnerabilities: 1075
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Experience Manager Adobe Experience Manager is affected by 1075 known vulnerabilities: 6 high, 241 medium, 828 low Critical High Medium Low

Vulnerabilities (1075)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48889 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24445		 CWE-79 Medium
No
No
 6.4.8.3, 6.5.7.0 08.12.2020 SB2020120849
#VU48888 - Server-Side Request Forgery (SSRF)
CVE-2020-24444		 CWE-918 Medium
No
No
 6.4.8.3, 6.5.7.0 08.12.2020 SB2020120849
#VU46369 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9735		 CWE-79 Medium
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46370 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9736		 CWE-79 Medium
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9737		 CWE-79 Medium
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46372 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9738		 CWE-79 Medium
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46373 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9740		 CWE-79 Medium
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9742		 CWE-79 Medium
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46375 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9743		 CWE-79 Low
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU46368 - Exposure of sensitive information to an unauthorized actor
CVE-2020-9733		 CWE-200 Low
No
No
 6.4.8.2, 6.5.6.0 08.09.2020 SB2020090806
#VU28946 - Server-Side Request Forgery (SSRF)
CVE-2020-9645		 CWE-918 Low
No
No
 6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9651		 CWE-79 Low
No
No
 6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9644		 CWE-79 Medium
No
No
 6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9648		 CWE-79 Low
No
No
 6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28941 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9647		 CWE-79 Low
No
No
 6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU28940 - Server-Side Request Forgery (SSRF)
CVE-2020-9643		 CWE-918 Medium
No
No
 6.3.3.8, 6.4.8.1 10.06.2020 SB2020061034
#VU26172 - Server-Side Request Forgery (SSRF)
CVE-2020-3769		 CWE-918 Medium
No
No
 6.3.3.8, 6.4.8.0, 6.5.4.0 18.03.2020 SB2020031815
#VU25255 - Resource exhaustion
CVE-2020-3741		 CWE-400 Medium
No
No
 6.4.0 HOTFIX 31868, 6.5.0 HOTFIX 31870 12.02.2020 SB2020021171
#VU24244 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-16469		 CWE-94 Medium
No
No
 6.5.3.0 14.01.2020 SB2020011420
#VU24243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16468		 CWE-79 Medium
No
No
 6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420


Showing elements 1021 - 1040 out of 1075