Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.20%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.20%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged a…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged a…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.5DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.17%Dec 9, 2025
- High7.1DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service.Check if you run itEPSS 0.18%Dec 9, 2025
- High7.1DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service.Check if you run itEPSS 0.20%Dec 9, 2025
- High7.8DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.21%Dec 9, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.76%Oct 28, 2025
- UnknownAdobe experience_manager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.98%Oct 16, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.31%Sep 9, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 77.46%Aug 12, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- UnknownAdobe experience_manager Deserialization of Untrusted DataPatch nowKEVEPSS 51.68%Jul 30, 2025