Adobe Experience Manager vulnerabilities
376 known CVE vulnerabilities in Adobe Experience Manager, translated and rated.
- CVE-2025-64793Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64792Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64791Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64790Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64789Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64627Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64626Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored XSS vulnerability. A low-privileged attacker can inject malicious scripts into form fields, which execute in the victim's browser.
- CVE-2025-64623Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.
- CVE-2025-64622Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64620Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim's browser.
- CVE-2025-64619Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim's browser.
- CVE-2025-64616Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim's browser.
- CVE-2025-64615Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim's browser.
- CVE-2025-64614Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim's browser.
- CVE-2025-64613Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
- CVE-2025-64612Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim's browser.
- CVE-2025-64611Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64609Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64607Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64606Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64605Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64604Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64603Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64602Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64601Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64600Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse to the affected page.
- CVE-2025-64599Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64598Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser.
- CVE-2025-64597Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64596Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64594Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64593Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse to the affected page.
- CVE-2025-64592Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64591Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64590Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64586Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64585Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.
- CVE-2025-64583Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.
- CVE-2025-64582Medium
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse the page containing the vulnerable field.
- CVE-2025-64581Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.
- CVE-2025-64580Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.
- CVE-2025-64579Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64578Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.
- CVE-2025-64577Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field.
- CVE-2025-64576Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
- CVE-2025-64575Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
- CVE-2025-64574Medium
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they browse the page containing the vulnerable field.
- CVE-2025-64572Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the victim's browser.
- CVE-2025-64569Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.
- CVE-2025-64566Medium
Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a manipulated web page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

