Adobe experience manager
This hub aggregates every CVE we track for Adobe experience manager, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
1,187
CVEs tracked
18
Critical
37
High
1
In CISA KEV
Severity distribution
MEDIUM1,119HIGH37CRITICAL18LOW13
Monthly trend
0
1
2
92
1
6
4
1
0
228
11
11
7
3
0
117
0
0
34
6
0
62
13
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Adobe experience manager.
- CVE-2026-48310Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.6
- CVE-2026-48259Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)9.6
- CVE-2026-48263Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4
- CVE-2026-48359Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)9.6
- CVE-2026-48260Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-2026-48355Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4
- CVE-2026-48261Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-2026-48253Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-2026-48262Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-2026-48252Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)8.6
- CVE-2026-48255Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-2026-48257Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-2026-48254Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4
- CVE-CVE-2026-48268Уязвимость системы управления контентом и медиаданными Adobe Experience Manager, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный JavaScript-код в контексте сессии авторизованного пользователя5.4
- CVE-CVE-2026-48258Уязвимость системы управления контентом и медиаданными Adobe Experience Manager, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить произвольный JavaScript-код в контексте сессии авторизованного пользователя5.4
Product normalization is registry-driven with AI assist and human review. How it works