Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe Experience Manager — Vulnerabilities & Security Advisories 965

All 965 CVE vulnerabilities found in Adobe Experience Manager, with AI-generated Chinese analysis, references, and POCs.

This page aggregates Common Weakness Enumeration entries specifically associated with the Adobe Experience Manager product ecosystem. It serves as a dedicated resource for tracking and analyzing security weaknesses within this widely used enterprise content management platform, which powers digital experiences for numerous global organizations. The collection encompasses a broad spectrum of vulnerability types, ranging from cross-site scripting and SQL injection to insecure direct object references and broken access control issues. These records cover a comprehensive historical time range, capturing security incidents from the early years of the software’s development through to recent updates, ensuring a complete view of the product’s evolving threat landscape. Users of this aggregation service can effectively track vendor advisories issued by Adobe to understand the context and severity of reported flaws. Additionally, visitors can examine the chronological history of vulnerabilities affecting specific components of Adobe Experience Manager, allowing for deeper risk assessment and patch management planning. The database also facilitates the understanding of general weakness classes by providing real-world examples specific to this technology stack. By centralizing this information, the page enables security professionals, developers, and IT administrators to conduct thorough due diligence, compare incident trends over time, and identify potential remediation strategies. This structured approach supports informed decision-making regarding software updates, configuration hardening, and overall security posture maintenance for organizations relying on Adobe Experience Manager for their digital infrastructure needs.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2025-64872 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.8 Medium 2025-12-10
CVE-2025-64562 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2025-12-10
CVE-2025-61797 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-10-14
CVE-2025-54272 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-10-14
CVE-2025-61796 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-10-14
CVE-2025-54250 Adobe Experience Manager | Improper Input Validation (CWE-20) CWE-20 4.9 Medium 2025-09-09
CVE-2025-54247 Adobe Experience Manager | Improper Input Validation (CWE-20) CWE-20 6.5 Medium 2025-09-09
CVE-2025-54246 Adobe Experience Manager | Incorrect Authorization (CWE-863) CWE-863 6.5 Medium 2025-09-09
CVE-2025-54248 Adobe Experience Manager | Improper Input Validation (CWE-20) CWE-20 7.7 High 2025-09-09
CVE-2025-54252 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-09-09
CVE-2025-54251 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91) CWE-91 4.3 Medium 2025-09-09
CVE-2025-54249 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918) CWE-918 6.5 Medium 2025-09-09
CVE-2025-47054 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46849 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46852 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46856 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46932 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46936 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46962 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-46998 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-20
CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863) CWE-863 10.0 Critical 2025-08-05
CVE-2025-54254 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) CWE-611 8.6 High 2025-08-05
CVE-2025-46958 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-08-05
CVE-2025-47001 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-30
CVE-2025-46993 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-24
CVE-2025-46996 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-24
CVE-2025-47061 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-24
CVE-2025-47053 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-16
CVE-2025-46959 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-16
CVE-2025-49547 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-07-08

All 965 known CVE vulnerabilities affecting Adobe Experience Manager with full Chinese analysis, references, and POCs where available.