Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Experience_manager
(Adobe)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 911 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2018-08-29 | CVE-2018-12807 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information modification. | Experience_manager | 5.3 | ||
| 2018-08-29 | CVE-2018-12806 | Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. | Experience_manager | 6.1 | ||
| 2017-12-09 | CVE-2017-3111 | An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Sensitive tokens are included in http GET requests under certain circumstances. | Experience_manager | 7.5 | ||
| 2017-08-11 | CVE-2017-3110 | Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability. | Experience_manager | 7.5 | ||
| 2017-12-09 | CVE-2017-3109 | An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet. | Experience_manager | 6.1 | ||
| 2017-08-11 | CVE-2017-3108 | Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability. | Experience_manager | 9.8 | ||
| 2017-08-11 | CVE-2017-3107 | Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability. | Experience_manager | 7.5 | ||
| 2017-12-09 | CVE-2017-11296 | An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager. | Experience_manager | 6.1 | ||
| 2016-12-15 | CVE-2016-7885 | Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks. | Experience_manager | 8.8 | ||
| 2016-12-15 | CVE-2016-7884 | Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks. | Experience_manager | 6.1 |