Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4862

Browse all 4862 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Found 98 results / 4862 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2022-30680 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 - 2022-09-16
CVE-2022-30685 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 Medium 2022-09-16
CVE-2022-30678 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 - 2022-09-16
CVE-2022-30683 AEM Violation of Secure Design Principles Security feature bypass — Experience Manager CWE-657 5.3 - 2022-09-16
CVE-2022-30677 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 - 2022-09-16
CVE-2022-35697 AEM File Upload Security Issue leading to RXSS — Experience Manager CWE-79 5.4 Medium 2022-08-09
CVE-2022-28820 Adobe Consulting Services Reflected Cross-Site Scripting Arbitrary Code Execution — Experience Manager CWE-79 6.1 Medium 2022-04-21
CVE-2021-43764 Adobe Experience Manager Stored XSS in the Spin Set — Experience Manager CWE-79 8.0 High 2022-01-13
CVE-2021-44176 Adobe Experience Manager Stored XSS in workflow Stages parameter — Experience Manager CWE-79 8.1 High 2022-01-13
CVE-2021-43761 Adobe Experience Manager Stored XSS on Edit Tag page via Localization input — Experience Manager CWE-79 8.0 High 2022-01-13
CVE-2021-44177 Adobe Experience Manager Stored XSS in user name parameter in the package manager — Experience Manager CWE-79 8.1 High 2022-01-13
CVE-2021-40722 AEM Forms Improper Restriction of XML External Entity Reference — Experience Manager CWE-611 9.8 Critical 2022-01-13
CVE-2021-43765 Adobe Experience Manager Stored XSS in the Carousel Set — Experience Manager CWE-79 8.1 High 2022-01-13
CVE-2021-44178 Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html — Experience Manager CWE-79 5.4 Medium 2022-01-13
CVE-2021-43762 Adobe Experience Manager Unicode normalization leads to dispatcher bypass — Experience Manager CWE-20 6.5 Medium 2022-01-13
CVE-2021-40712 Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS — Experience Manager CWE-20 6.5 Medium 2021-09-27
CVE-2021-40714 Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter — Experience Manager CWE-79 6.1 Medium 2021-09-27
CVE-2021-40713 Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack — Experience Manager CWE-295 5.9 Medium 2021-09-27
CVE-2021-40711 Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution — Experience Manager CWE-79 5.4 Medium 2021-09-27
CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass — Experience Manager CWE-918 5.4 Medium 2021-08-24
CVE-2021-28628 Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp — Experience Manager CWE-79 6.3 Medium 2021-08-24
CVE-2021-28625 Adobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jsp — Experience Manager CWE-79 6.3 Medium 2021-08-24
CVE-2021-28626 Adobe Experience Manager Improper Authorization at /content/usergenerated — Experience Manager CWE-285 3.7 Low 2021-08-24
CVE-2021-21084 Adobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code execution — Experience Manager CWE-79 7.3 High 2021-06-28
CVE-2021-21083 Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service — Experience Manager CWE-284 7.5 High 2021-06-28
CVE-2021-21043 Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools — Experience Manager CWE-79 6.1 Medium 2021-02-02
CVE-2020-24444 Blind SSRF in Forms add-on for AEM — Experience Manager CWE-918 5.8 Medium 2020-12-10
CVE-2020-9743 HTML injection in AEM's content editor component — Experience Manager CWE-20 5.3 Medium 2020-09-10
CVE-2020-9734 Stored XSS in AEM Forms component — Experience Manager CWE-79 9.0 Critical 2020-09-10
CVE-2020-9742 Reflected XSS in AEM Inbox module — Experience Manager CWE-79 9.0 Critical 2020-09-10

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.