Experience Manager Cloud Service vulnerabilities | LiveThreat CVE Feed

Product

Experience Manager Cloud Service

by Adobe · last CVE Jun 13, 2024

221

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities221 In the news0 Timeline

Severity mix

Critical 2High 1Medium 215Low 3

Severity

All severities221 Critical2 High1 Medium215 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Experience Manager Cloud Service to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40722	9.8	3%	Jan 13	AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker… Affected: All versions, or not specified
CVE-2020-24445	9.0	3%	Dec 10	AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-21083	7.5	2%	Jun 28	AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by an Improper Access Control vulnerability Affected: All versions, or not specified
CVE-2021-43762	6.5	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls Affected: All versions, or not specified
CVE-2021-44178	6.1	1%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter Affected: All versions, or not specified
CVE-2021-44177	6.1	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-44176	6.1	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-43765	6.1	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-21084	6.1	2%	Jun 28	AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS)… Affected: All versions, or not specified
CVE-2024-36238	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.20
CVE-2024-34120	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.20
CVE-2024-26082	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.20
CVE-2024-36206	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-26075	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26074	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26060	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36165	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36186	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36220	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36204	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36181	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36190	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36235	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-20784	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36162	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36218	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36168	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26121	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36202	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36180	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36163	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26085	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26077	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36178	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36166	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26054	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26113	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-36219	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36227	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36208	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36155	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36210	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-26081	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36161	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2023-48556	5.4	1%	Dec 15	Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability Affected: before 2023.11
CVE-2023-48555	5.4	1%	Dec 15	Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: before 2023.11
CVE-2023-48554	5.4	1%	Dec 15	Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: before 2023.11
CVE-2023-48553	5.4	1%	Dec 15	Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: before 2023.11
CVE-2023-48552	5.4	1%	Dec 15	Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: before 2023.11
CVE-2023-48551	5.4	1%	Dec 15	Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject… Affected: before 2023.11