AE
Product
Adobe Experience Manager
On CISA KEVExploited in the wild
652
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 491Low 0
Watch
Add Adobe Experience Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54247 | 6.5 | Sep 9 | Adobe Experience Manager | Improper Input Validation (CWE-20) Affected: through 6.5.23.0 |
| CVE-2025-54246 | 6.5 | Sep 9 | Adobe Experience Manager | Incorrect Authorization (CWE-863) Affected: through 6.5.23.0 |
| CVE-2025-54249 | 6.5 | Sep 9 | Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 6.5.23.0 |
| CVE-2024-43729 | 6.5 | Dec 10 | Adobe Experience Manager | Improper Authorization (CWE-285) Affected: through 6.5.21 |
| CVE-2025-47094 | 6.1 | Jun 10 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5.22 |
| CVE-2025-47049 | 6.1 | Jun 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.22 |
| CVE-2024-36216 | 6.1 | Jun 13 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) Affected: through 6.5.20 |
| CVE-2018-19727 | 6.1 | Jan 28 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability Affected: 6.4, 6.3, 6.2, 6.1, and 6.0 versions |
| CVE-2018-19726 | 6.1 | Jan 28 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability Affected: 6.4, 6.3, 6.2, 6.1, and 6.0 versions |
| CVE-2026-34625 | 5.4 | Apr 14 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 11.7 |
| CVE-2026-34623 | 5.4 | Apr 14 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 11.7 |
| CVE-2026-34624 | 5.4 | Apr 14 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 11.7 |
| CVE-2026-27288 | 5.4 | Apr 14 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 11.7 |
| CVE-2025-64622 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64582 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64547 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64833 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64613 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64829 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64553 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64545 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64546 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64574 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64550 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64827 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64602 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64593 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64887 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64548 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64563 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64800 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64559 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64817 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64888 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64600 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64583 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64826 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64605 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64875 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64598 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64558 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64616 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64820 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64861 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64801 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64620 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64601 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64560 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64556 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.23 |
| CVE-2025-64565 | 5.4 | Dec 10 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.23 |
The 500 most important CVEs for this product (exploited first, then by severity)