Adobe Experience Manager
98 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-29307 | unspecified – 6.5.16.0 ; unspecified – None | Open Redirect on AEM Target | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22271 | unspecified – 6.5.15.0 ; unspecified – None | AEM Weak Cryptography for Passwords Security feature bypass | MEDIUM 5.3 | 0.8 % | ||
| CVE-2023-22269 | unspecified – 6.5.15.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22266 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22265 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22264 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22263 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22262 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22261 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22260 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22259 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22258 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22257 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22256 | unspecified – 6.5.15.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22254 | unspecified – 6.5.15.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22253 | unspecified – 6.5.15.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-22252 | unspecified – 6.5.15.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44510 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44488 | unspecified – 6.5.14.0 ; unspecified – None | AEM URL Redirection to Untrusted Site Security feature bypass | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44474 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44471 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44470 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44467 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44466 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44465 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44463 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42365 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42364 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42362 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42357 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42356 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42354 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42352 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42350 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42349 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42348 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42346 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-42345 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-35695 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-35693 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-30679 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-44473 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-44469 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-44468 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-42367 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-42366 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-44462 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-42360 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-42351 | unspecified – 6.5.14.0 ; unspecified – None | AEM Incorrect Authorization Security feature bypass | MEDIUM 4.3 | 1.0 % | ||
| CVE-2022-35696 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-35694 | unspecified – 6.5.14.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.8 % | ||
| CVE-2022-28851 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 37 % | ||
| CVE-2022-38439 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-38438 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.9 % | ||
| CVE-2022-35664 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30681 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30684 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-34218 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30686 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30682 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30680 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30685 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30678 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-30683 | unspecified – 6.5.13.0 ; unspecified – None | AEM Violation of Secure Design Principles Security feature bypass | MEDIUM 5.3 | 0.7 % | ||
| CVE-2022-30677 | unspecified – 6.5.13.0 ; unspecified – None | AEM Reflected XSS Arbitrary code execution | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-35697 | unspecified – 2.20.6 ; unspecified – None | AEM File Upload Security Issue leading to RXSS | MEDIUM 5.4 | 0.7 % | ||
| CVE-2022-28820 | unspecified – 5.1.x ; unspecified – None | Adobe Consulting Services Reflected Cross-Site Scripting Arbitrary Code Execution | MEDIUM 6.1 | 1.1 % | ||
| CVE-2021-43764 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Stored XSS in the Spin Set | HIGH 8.0 | 1.5 % | ||
| CVE-2021-44176 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Stored XSS in workflow Stages parameter | HIGH 8.1 | 1.6 % | ||
| CVE-2021-43761 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Stored XSS on Edit Tag page via Localization input | HIGH 8.0 | 1.1 % | ||
| CVE-2021-44177 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Stored XSS in user name parameter in the package manager | HIGH 8.1 | 1.6 % | ||
| CVE-2021-40722 | unspecified – 6.5.10.0 ; unspecified – None | AEM Forms Improper Restriction of XML External Entity Reference | CRITICAL 9.8 | 3.3 % | ||
| CVE-2021-43765 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Stored XSS in the Carousel Set | HIGH 8.1 | 1.6 % | ||
| CVE-2021-44178 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html | MEDIUM 6.1 | 1.4 % | ||
| CVE-2021-43762 | unspecified – 6.5.10.0 ; unspecified – None | Adobe Experience Manager Unicode normalization leads to dispatcher bypass | MEDIUM 6.5 | 1.6 % | ||
| CVE-2021-40712 | unspecified – 6.5.9.0 ; unspecified – None | Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS | MEDIUM 6.5 | 1.7 % | ||
| CVE-2021-40714 | unspecified – 6.5.9.0 ; unspecified – None | Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter | MEDIUM 6.1 | 1.1 % | ||
| CVE-2021-40713 | unspecified – 6.5.9.0 ; unspecified – None | Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack | MEDIUM 5.9 | 1.0 % | ||
| CVE-2021-40711 | unspecified – 6.5.9.0 ; unspecified – None | Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution | MEDIUM 5.4 | 1.5 % | ||
| CVE-2021-28627 | unspecified – 6.5.8.0 ; unspecified – None | Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass | HIGH 8.8 | 1.3 % | ||
| CVE-2021-28628 | unspecified – 6.5.8.0 ; unspecified – None | Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp | MEDIUM 6.3 | 1.0 % | ||
| CVE-2021-28625 | unspecified – 6.5.8.0 ; unspecified – None | Adobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jsp | MEDIUM 6.3 | 1.0 % | ||
| CVE-2021-28626 | unspecified – 6.5.8.0 ; unspecified – None | Adobe Experience Manager Improper Authorization at /content/usergenerated | HIGH 7.5 | 1.3 % | ||
| CVE-2021-21084 | unspecified – 6.3.3.8 ; unspecified – 6.4.8.3 ; unspecified – 6.5.7.0 ; … | Adobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code execution | HIGH 7.3 | 1.8 % | ||
| CVE-2021-21083 | unspecified – 6.3.3.8 ; unspecified – 6.4.8.3 ; unspecified – 6.5.7.0 ; … | Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service | HIGH 7.5 | 2.0 % | ||
| CVE-2021-21043 | unspecified – 4.9.2 ; unspecified – None | Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools | MEDIUM 6.1 | 3.4 % | ||
| CVE-2020-24444 | <= Forms SP6 add-on for AEM 6.5.6.0 ; <= Forms SP8 add-on for AEM 6.4.8.2 ; <= None | Blind SSRF in Forms add-on for AEM | MEDIUM 5.8 | 2.1 % | ||
| CVE-2020-9743 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | HTML injection in AEM's content editor component | MEDIUM 6.1 | 2.0 % | ||
| CVE-2020-9734 | unspecified – Forms SP5 add-on for AEM 6.5.5.0 ; unspecified – Forms SP8 add-on for AEM 6.4.8.1 ; unspecified – None | Stored XSS in AEM Forms component | CRITICAL 9.0 | 1.9 % | ||
| CVE-2020-9742 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | Reflected XSS in AEM Inbox module | CRITICAL 9.0 | 1.8 % | ||
| CVE-2020-9741 | unspecified – Forms SP5 add-on for AEM 6.5.5.0 ; unspecified – Forms SP8 add-on for AEM 6.4.8.1 ; unspecified – None | Stored XSS in AEM Forms Components | CRITICAL 9.0 | 1.9 % | ||
| CVE-2020-9736 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | Stored XSS in AEM's Content Repository Development Environment | MEDIUM 6.8 | 1.8 % | ||
| CVE-2020-9735 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | Stored XSS in AEM's Content Repository Development Environment | MEDIUM 6.8 | 1.8 % | ||
| CVE-2020-9732 | unspecified – Forms SP5 add-on for AEM 6.5.5.0 ; unspecified – Forms SP8 add-on for AEM 6.4.8.1 ; unspecified – None | Stored XSS in AEM Sites Components | CRITICAL 9.0 | 2.8 % | ||
| CVE-2020-9738 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | Stored XSS in AEM's Content Repository Development Environment | MEDIUM 6.8 | 1.7 % | ||
| CVE-2020-9737 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | Stored XSS in AEM's Content Repository Development Environment | MEDIUM 6.8 | 1.7 % | ||
| CVE-2020-9733 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – None | Sensitive information disclosure possible in AEM | HIGH 7.5 | 3.8 % | ||
| CVE-2020-9740 | unspecified – 6.5.5.0 ; unspecified – 6.4.8.1 ; unspecified – 6.3.3.8 ; … | Stored XSS in AEM Design Importer Component | CRITICAL 9.0 | 1.9 % |