Vulnerabilities > Adobe > Experience Manager > 6.5.0

DATE CVE VULNERABILITY TITLE RISK
2020-12-10 CVE-2020-24445 Cross-site Scripting vulnerability in Adobe products
AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe CWE-79
critical
9.0
2020-06-12 CVE-2020-9651 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (reflected) vulnerability.
network
adobe CWE-79
4.3
2020-06-12 CVE-2020-9648 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability.
network
adobe CWE-79
4.3
2020-06-12 CVE-2020-9647 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability.
network
adobe CWE-79
4.3
2020-06-12 CVE-2020-9645 Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability.
network
low complexity
adobe CWE-918
5.0
2020-06-12 CVE-2020-9644 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability.
network
adobe CWE-79
3.5
2020-06-12 CVE-2020-9643 Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability.
network
low complexity
adobe CWE-918
5.0
2020-03-25 CVE-2020-3769 Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability.
network
low complexity
adobe CWE-918
5.0
2020-01-15 CVE-2019-16469 Expression Language Injection vulnerability in Adobe Experience Manager 6.5.0
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability.
network
low complexity
adobe CWE-917
5.0
2020-01-15 CVE-2019-16468 Information Exposure vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability.
network
low complexity
adobe CWE-200
5.0