Experience Manager Cloud Service vulnerabilities | LiveThreat CVE Feed

Product

Experience Manager Cloud Service

by Adobe · last CVE Jun 13, 2024

236

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities236 In the news0 Timeline

Severity mix

Critical 2High 1Medium 230Low 3

Severity

All severities236 Critical2 High1 Medium230 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Experience Manager Cloud Service to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40722	9.8	3%	Jan 13	AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker… Affected: All versions, or not specified
CVE-2020-24445	9.0	3%	Dec 10	AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-21083	7.5	2%	Jun 28	AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by an Improper Access Control vulnerability Affected: All versions, or not specified
CVE-2021-43762	6.5	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls Affected: All versions, or not specified
CVE-2021-44178	6.1	1%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter Affected: All versions, or not specified
CVE-2021-44177	6.1	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-44176	6.1	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-43765	6.1	2%	Jan 13	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to… Affected: All versions, or not specified
CVE-2021-21084	6.1	2%	Jun 28	AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS)… Affected: All versions, or not specified
CVE-2024-36238	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: through 6.5.20
CVE-2024-34120	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.20
CVE-2024-26082	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 6.5.20
CVE-2024-36206	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-26075	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26074	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26060	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36165	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36186	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36220	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36204	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36181	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36190	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36235	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-20784	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36162	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36218	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36168	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26121	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36202	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36180	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36163	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26085	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26077	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36178	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36166	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26054	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26113	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-36219	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36227	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-36208	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36155	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36210	5.4	0%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-26081	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-36161	5.4	1%	Jun 13	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26065	5.4	0%	Mar 18	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26080	5.4	0%	Mar 18	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79) Affected: 0
CVE-2024-26120	5.4	0%	Mar 18	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0
CVE-2024-26104	5.4	0%	Mar 18	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-26101	5.4	0%	Mar 18	Adobe Experience Manager \| Cross-site Scripting (Reflected XSS) (CWE-79) Affected: 0
CVE-2024-26096	5.4	0%	Mar 18	Adobe Experience Manager \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: 0