Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Experience_manager
(Adobe)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 911 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2016-12-15 | CVE-2016-7882 | Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks. | Experience_manager | 6.1 | ||
| 2016-12-15 | CVE-2016-6933 | Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks. | Experience_manager, Livecycle | 6.1 | ||
| 2016-08-09 | CVE-2016-4253 | The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecified vectors. | Experience_manager | 5.3 | ||
| 2016-08-09 | CVE-2016-4170 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Experience_manager | 6.1 | ||
| 2016-08-09 | CVE-2016-4169 | Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors. | Experience_manager | 5.3 | ||
| 2016-08-09 | CVE-2016-4168 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Experience_manager | 6.1 | ||
| 2016-02-10 | CVE-2016-0958 | Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow remote attackers to have an unspecified impact via a crafted serialized Java object. | Experience_manager | 7.5 | ||
| 2016-02-10 | CVE-2016-0957 | Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. | Dispatcher, Experience_manager | 7.5 | ||
| 2016-02-10 | CVE-2016-0956 | The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors. | Experience_manager, Sling | 7.5 | ||
| 2016-02-10 | CVE-2016-0955 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog. | Experience_manager | 6.1 |