CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability. |
| 11/08/2017 |
| CVE-2017-3108 | 严重9.8 | Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability. | 11/08/2017 |
| CVE-2017-3107 | 高危7.5 | Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability. | 11/08/2017 |
| CVE-2016-7885 | 高危8.8 | Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks. | 15/12/2016 |
| CVE-2016-7884 | 中危6.1 | Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks. | 15/12/2016 |
| CVE-2016-7883 | 中危6.1 | Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks. | 15/12/2016 |
| CVE-2016-7882 | 中危6.1 | Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks. | 15/12/2016 |
| CVE-2016-6933 | 中危6.1 | Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks. | 15/12/2016 |
| CVE-2016-4253 | 中危5.3 | The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecified vectors. | 09/08/2016 |
| CVE-2016-4170 | 中危6.1 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 09/08/2016 |
| CVE-2016-4169 | 中危5.3 | Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors. | 09/08/2016 |
| CVE-2016-4168 | 中危6.1 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 09/08/2016 |
| CVE-2016-0958 | 高危7.5 | Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow remote attackers to have an unspecified impact via a crafted serialized Java object. | 10/02/2016 |
| CVE-2016-0957 | 高危7.5 | Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. | 10/02/2016 |
| CVE-2016-0956 | 高危7.5 | The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors. | 10/02/2016 |
| CVE-2016-0955 | 中危6.1 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog. | 10/02/2016 |