Known vulnerabilities in Adobe Experience Manager - page 53

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 1075
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Experience Manager Adobe Experience Manager is affected by 1075 known vulnerabilities: 6 high, 241 medium, 828 low Critical High Medium Low

Vulnerabilities (1075)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24242 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16467
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU24241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16466
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU20149 - Improper Authentication
CVE-2019-7964
CWE-287 High
No
No
6.4.0 HOTFIX 30379, 6.5.0 HOTFIX 30379 13.08.2019 SB2019081316
#VU17117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19727
CWE-79 Low
No
No
6.3.3.2, 6.4.3.0 22.01.2019 SB2019012204
#VU17116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19726
CWE-79 Low
No
No
6.2-SP1-CFP15, 6.3.2.2, 6.4.1.0 22.01.2019 SB2019012204
#VU15283 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15973
CWE-79 Low
No
No
6.0 HOTFIX 25133, 6.1-SP2-CFP17, 6.2-SP1-CFP15, 6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU15282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15972
CWE-79 Low
No
No
6.1-SP2-CFP17, 6.2-SP1-CFP15, 6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU15281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15971
CWE-79 Low
No
No
6.4.2.0 10.10.2018 SB2018101012
#VU15280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15970
CWE-79 Low
No
No
6.4.2.0 10.10.2018 SB2018101012
#VU15279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15969
CWE-79 Low
No
No
6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU14341 - Improper input validation
CVE-2018-12807
CWE-20 Low
No
No
- 14.08.2018 SB2018081407
#VU14340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5005
CWE-79 Low
No
No
- 14.08.2018 SB2018081407
#VU14339 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-12806
CWE-79 Low
No
No
- 14.08.2018 SB2018081407
#VU13629 - Server-Side Request Forgery (SSRF)
CVE-2018-12809
CWE-918 Low
No
No
- 10.07.2018 SB2018071004
#VU13628 - Server-Side Request Forgery (SSRF)
CVE-2018-5006
CWE-918 Low
No
No
- 10.07.2018 SB2018071004
#VU13626 - Server-Side Request Forgery (SSRF)
CVE-2018-5004
CWE-918 Low
No
No
- 10.07.2018 SB2018071004
#VU11673 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4931
CWE-79 Low
No
No
- 10.04.2018 SB2018041015
#VU11672 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4930
CWE-79 Low
No
No
- 10.04.2018 SB2018041015
#VU11671 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4929
CWE-79 Low
No
No
- 10.04.2018 SB2018041015
#VU10470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4875
CWE-79 Low
No
No
- 13.02.2018 SB2018021307


Showing elements 1041 - 1060 out of 1075