Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe Experience Manager as a Cloud Service — Vulnerabilities & Security Advisories 70

All 70 CVE vulnerabilities found in Adobe Experience Manager as a Cloud Service, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities affecting Adobe Experience Manager as a Cloud Service, categorized by Common Weakness Enumerations. It aggregates known issues discovered within the product ecosystem, covering security flaws reported from early 2020 through the present. This resource is designed to help security professionals and administrators track Adobe’s vulnerability advisories, gain a deeper understanding of specific weakness classes prevalent in cloud-based enterprise content management systems, and review the historical vulnerability landscape for this particular Adobe offering. By centralizing this information, the page serves as a reference point for assessing the security posture of Adobe Experience Manager as a Cloud Service deployments. Readers can analyze trends in defect types, identify recurring architectural issues, and correlate reported weaknesses with Adobe’s security release cycles. The collected data includes details on affected components, severity classifications, and remediation status where available, providing a comprehensive view of the product’s security history without relying on specific individual exploit identifiers. This aggregation facilitates better risk management by highlighting the types of flaws that have historically impacted the platform, allowing teams to prioritize patching strategies and configuration hardening efforts based on documented patterns rather than isolated incidents.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2026-48259 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918) CWE-918 9.6 Critical 2026-07-14
CVE-2026-48310 Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 8.6 High 2026-07-14
CVE-2026-48359 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) CWE-611 9.6 Critical 2026-07-14
CVE-2026-48263 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48355 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48260 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48261 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48262 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48253 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48252 Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306) CWE-306 8.6 High 2026-07-14
CVE-2026-48255 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48254 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-48257 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-47980 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47945 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-48280 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47985 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47935 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47941 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-48251 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-48289 Adobe Experience Manager | Improper Input Validation (CWE-20) CWE-20 3.5 Low 2026-06-09
CVE-2026-48297 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-48256 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-48268 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47993 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47936 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47956 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47939 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47982 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09
CVE-2026-47989 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2026-06-09

All 70 known CVE vulnerabilities affecting Adobe Experience Manager as a Cloud Service with full Chinese analysis, references, and POCs where available.