AE
Product
Adobe Experience Manager 6.5
248
CVEs
0
On KEV
10.0
Max CVSS
35
New 30D
Severity mix
Critical 15High 6Medium 224Low 3
Watch
Add Adobe Experience Manager 6.5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47987 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-47958 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-48265 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-48250 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-48271 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-47978 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-47949 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-48299 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-48266 | 5.4 | Jun 9 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-27222 | 5.4 | Apr 14 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-27258 | 5.4 | Apr 14 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-27241 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27255 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27244 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27251 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27223 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27262 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27232 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27249 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27247 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27242 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27252 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27235 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27225 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27256 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27237 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27265 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27233 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27236 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27240 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27239 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27234 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27231 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27230 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27229 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27266 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27254 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27228 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27248 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27257 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27226 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27253 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27224 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-27250 | 5.4 | Mar 11 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2026-34694 | 4.8 | Jun 9 | Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.24 |
| CVE-2026-75726 | 3.5 | Sep 8 | Adobe Experience Manager | Improper Input Validation (CWE-20) Affected: through 6.5.24 |
| CVE-2026-48289 | 3.5 | Jun 9 | Adobe Experience Manager | Improper Input Validation (CWE-20) Affected: through 6.5.24 |
| CVE-2026-48288 | 3.5 | Jun 9 | Adobe Experience Manager | Improper Input Validation (CWE-20) Affected: through 6.5.24 |