Login Request a demo
EM
Product
Experience Manager
by Adobe · last CVE Oct 13, 2026
1,283
CVEs
0
On KEV
10.0
Max CVSS
16
New 30D
Vulnerabilities1,283In the news0Timeline
Severity mix
Critical 21High 30Medium 449Low 0
Severity
All severities500Critical21High30Medium449Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Experience Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27235
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27225
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27256
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24; before 2026.2.0; 6.5; 6.5
CVE-2026-27237
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27265
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27233
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27236
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27240
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27239
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27234
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27231
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27230
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27229
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27266
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27254
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24; before 2026.2.0; 6.5; 6.5
CVE-2026-27228
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27248
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27257
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24; before 2026.2.0; 6.5; 6.5
CVE-2026-27226
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27253
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24; before 2026.2.0; 6.5; 6.5
CVE-2026-27224
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2026.2.0; 6.5; 6.5
CVE-2026-27250
5.4
0%
Mar 11
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24; before 2026.2.0; 6.5; 6.5
CVE-2025-64622
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64582
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64547
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64833
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64613
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64829
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64553
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64545
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64546
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64574
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64550
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64827
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64602
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64593
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64887
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64548
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64563
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64800
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64559
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64817
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64888
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64600
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64583
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64826
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64605
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64875
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64598
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
CVE-2025-64558
5.4
0%
Dec 10
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 6.5.24.0; before 2025.12.0; 6.5
Page 6 of 9 · 449 total
1…567…9
The 500 most important CVEs for this product (exploited first, then by severity)