Login Request a demo
AE
Product
Adobe Experience Manager
by Adobe · last CVE Apr 14, 2026
On CISA KEVExploited in the wild
638
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities638In the news1Timeline
Severity mix
Critical 5High 4Medium 491Low 0
Severity
All severities500Critical5High4Medium491Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Adobe Experience Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54253
In wildKEV
10.0
89%
Aug 5
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through 6.5.23
CVE-2024-26029
9.8
1%
Jun 13
Adobe Experience Manager | Improper Access Control (CWE-284)
Affected: through 6.5.20
CVE-2025-64537
9.3
1%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64539
9.3
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64538
9.3
1%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-46840
8.7
0%
Jun 10
Adobe Experience Manager | Improper Authorization (CWE-285)
Affected: through 6.5.22
CVE-2025-46837
8.7
0%
Jun 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.22
CVE-2025-54254
8.6
70%
Aug 5
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Affected: through 6.5.23
CVE-2025-54248
7.7
6%
Sep 9
Adobe Experience Manager | Improper Input Validation (CWE-20)
Affected: through 6.5.23.0
CVE-2025-54247
6.5
0%
Sep 9
Adobe Experience Manager | Improper Input Validation (CWE-20)
Affected: through 6.5.23.0
CVE-2025-54246
6.5
0%
Sep 9
Adobe Experience Manager | Incorrect Authorization (CWE-863)
Affected: through 6.5.23.0
CVE-2025-54249
6.5
2%
Sep 9
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: through 6.5.23.0
CVE-2024-43729
6.5
1%
Dec 10
Adobe Experience Manager | Improper Authorization (CWE-285)
Affected: through 6.5.21
CVE-2025-47094
6.1
0%
Jun 10
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Affected: through 6.5.22
CVE-2025-47049
6.1
0%
Jun 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.22
CVE-2024-36216
6.1
0%
Jun 13
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
Affected: through 6.5.20
CVE-2018-19727
6.1
2%
Jan 28
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability
Affected: 6.4, 6.3, 6.2, 6.1, and 6.0 versions
CVE-2018-19726
6.1
2%
Jan 28
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability
Affected: 6.4, 6.3, 6.2, 6.1, and 6.0 versions
CVE-2026-34625
5.4
0%
Apr 14
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 11.7
CVE-2026-34623
5.4
0%
Apr 14
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 11.7
CVE-2026-34624
5.4
0%
Apr 14
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 11.7
CVE-2026-27288
5.4
0%
Apr 14
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 11.7
CVE-2025-64622
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64582
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64547
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64833
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64613
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64829
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64553
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64545
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64546
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64574
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64550
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64827
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64602
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64593
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64887
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64548
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64563
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64800
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64559
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64817
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64888
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64600
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64583
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64826
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64605
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64875
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64598
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
CVE-2025-64558
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 6.5.23
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)