Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.EPSS 0.7%Oct 13, 2026
- Critical9.9Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gainiEPSS 0.6%Oct 13, 2026
- Medium5.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.EPSS 0.4%Oct 13, 2026
- Critical10.0Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gainiEPSS 0.8%Oct 13, 2026
- Critical10.0Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gainiEPSS 0.8%Oct 13, 2026
- High7.1Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- High7.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.EPSS 0.8%Oct 13, 2026
- High7.8Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.3%Oct 13, 2026
- Medium5.5Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.EPSS 0.2%Oct 13, 2026
- High7.8Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.4%Oct 13, 2026
- High7.8Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.8Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.3%Oct 13, 2026
- High7.8Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.8Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- Medium5.5Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.EPSS 0.2%Oct 13, 2026
- Medium5.5Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.EPSS 0.3%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.EPSS 0.9%Oct 13, 2026
- High8.7Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.9%Oct 13, 2026
- Critical9.1Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.8%Oct 13, 2026
- High8.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.6%Oct 13, 2026
- Critical9.8Adobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.6%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026