Known vulnerabilities in Adobe Experience Manager - page 58

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_experience_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 1180
Public exploits: 1
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Experience Manager Adobe Experience Manager is affected by 1180 known vulnerabilities: 7 high, 244 medium, 929 low Critical High Medium Low

Vulnerabilities (1180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28946 - Server-Side Request Forgery (SSRF)
CVE-2020-9645
CWE-918 Low
No
No
6.4.8.1, 6.5.5.0 10.06.2020 SB2020061034
#VU26172 - Server-Side Request Forgery (SSRF)
CVE-2020-3769
CWE-918 Medium
No
No
6.3.3.8, 6.4.8.0, 6.5.4.0 18.03.2020 SB2020031815
#VU25255 - Resource exhaustion
CVE-2020-3741
CWE-400 Medium
No
No
6.4.0 HOTFIX 31868, 6.5.0 HOTFIX 31870 12.02.2020 SB2020021171
#VU24244 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-16469
CWE-94 Medium
No
No
6.5.3.0 14.01.2020 SB2020011420
#VU24243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16468
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU24242 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16467
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU24241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16466
CWE-79 Medium
No
No
6.3.3.7, 6.4.7.0, 6.5.3.0 14.01.2020 SB2020011420
#VU20149 - Improper Authentication
CVE-2019-7964
CWE-287 High
No
No
6.4.0 HOTFIX 30379, 6.5.0 HOTFIX 30379 13.08.2019 SB2019081316
#VU17117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19727
CWE-79 Low
No
No
6.3.3.2, 6.4.3.0 22.01.2019 SB2019012204
#VU17116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19726
CWE-79 Low
No
No
6.2-SP1-CFP15, 6.3.2.2, 6.4.1.0 22.01.2019 SB2019012204
#VU15283 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15973
CWE-79 Low
No
No
6.0 HOTFIX 25133, 6.1-SP2-CFP17, 6.2-SP1-CFP15, 6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU15282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15972
CWE-79 Low
No
No
6.1-SP2-CFP17, 6.2-SP1-CFP15, 6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU15281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15971
CWE-79 Low
No
No
6.4.2.0 10.10.2018 SB2018101012
#VU15280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15970
CWE-79 Low
No
No
6.4.2.0 10.10.2018 SB2018101012
#VU15279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15969
CWE-79 Low
No
No
6.3.3.0, 6.4.2.0 10.10.2018 SB2018101012
#VU14341 - Improper input validation
CVE-2018-12807
CWE-20 Low
No
No
- 14.08.2018 SB2018081407
#VU14340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-5005
CWE-79 Low
No
No
- 14.08.2018 SB2018081407
#VU14339 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-12806
CWE-79 Low
No
No
- 14.08.2018 SB2018081407
#VU13628 - Server-Side Request Forgery (SSRF)
CVE-2018-5006
CWE-918 Low
No
No
- 10.07.2018 SB2018071004
#VU13626 - Server-Side Request Forgery (SSRF)
CVE-2018-5004
CWE-918 Low
No
No
- 10.07.2018 SB2018071004


Showing elements 1141 - 1160 out of 1180