Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged a…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged a…Check if you run itEPSS 0.25%Dec 10, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.76%Oct 28, 2025
- UnknownAdobe experience_manager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.98%Oct 16, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 77.46%Aug 12, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- UnknownAdobe experience_manager Deserialization of Untrusted DataPatch nowKEVEPSS 51.68%Jul 30, 2025
- Medium5.4Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject mCheck this weekEPSS 27.00%Jul 8, 2025
- Medium5.4Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject mCheck this weekEPSS 27.00%Jul 8, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.33%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.29%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.36%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.33%Jun 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject mCheck if you run itEPSS 0.33%Jun 10, 2025