Vulnerabilities > Adobe > Experience Manager > 6.4.8.1

DATE CVE VULNERABILITY TITLE RISK
2020-09-10 CVE-2020-9732 Cross-site Scripting vulnerability in Adobe Experience Manager
The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component.
network
low complexity
adobe CWE-79
critical
 9.0
9.0
2020-03-25 CVE-2020-3769 Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability.
network
low complexity
adobe CWE-918
7.5
7.5
2019-07-18 CVE-2019-7955 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability.
network
low complexity
adobe CWE-79
6.1
6.1
2019-07-18 CVE-2019-7954 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability.
network
low complexity
adobe CWE-79
6.1
6.1