Adobe Experience Manager As A Cloud Service

Vulnerabilities related to Adobe Experience Manager As A Cloud Service 9

• Medium 5.4 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the... CVE-2026-123259 06:56
• Medium 5.4 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in t... CVE-2026-123258 06:56
• Medium 5.4 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the... CVE-2026-118478 06:56
• Medium 5.4 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in t... CVE-2026-118197 06:56
• Medium 5.4 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the... CVE-2026-114372 06:56
• Critical 9.9 Adobe Experience Manager | Incorrect Authorization (CWE-863) Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user in... CVE-2026-114371 06:56
• Critical 9.9 Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of t... CVE-2026-113580 06:56
• Critical 9.9 Adobe Experience Managerの更新、脆弱性に修正版 Adobe Experience Managerの更新で、低い権限の攻撃者によるコード実行につながる重大な脆弱性4件が修正されました。Cloud Service、6.5、6.5 LTSの利用組織は、該当版かを確認し、修正版かCumulative Hotfixを適用してください。 CVE-2026-113579 06:56
• Medium 5.4 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is chan... CVE-2026-123341 06:55