Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Adobe

Adobe Experience Manager vulnerabilities

98 published CVEs name Adobe Experience Manager among the affected products.

All 98 in the listAtom feed of new CVEs
Published CVEs
98
Last 12 months
0
Critical
6
Known exploited
0

Critical 6High 8Medium 82Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 202012
  2. 202111
  3. 202258
  4. 202317

Newest CVEs

  • CVE-2023-29307

    Open Redirect on AEM Target

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22271

    AEM Weak Cryptography for Passwords Security feature bypass

    Adobe · Experience Manager

    Medium5.3
  • CVE-2023-22269

    AEM Reflected XSS Arbitrary code execution

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22266

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22265

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22264

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22263

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22262

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22261

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4
  • CVE-2023-22260

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe · Experience Manager

    Medium5.4

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)73
  2. CWE-601 Open redirect13
  3. CWE-20 Improper input validation3
  4. CWE-918 Server-side request forgery (SSRF)2
  5. CWE-200 Exposure of sensitive information1
  6. CWE-261 1
  7. CWE-269 Improper privilege management1
  8. CWE-284 Improper access control1
  9. CWE-285 Improper authorization1
  10. CWE-295 Improper certificate validation1