Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:experience_manager:6.5:sp1:*:*:lts:*:*:*

part: a version: 6.5 update: sp1

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductExperience Manager (4312bd60-0d9f-5443-9cf9-eaaabd81f028)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48301 vulnerable 2026-07-29 00:55:01.262727 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Published: 2026-06-09T16:48:25.292Z
Updated: 2026-06-10T14:56:15.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48288 vulnerable 2026-07-29 00:55:01.252386 Adobe Experience Manager | Improper Input Validation (CWE-20)
LOW (3.5)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Published: 2026-06-09T16:48:10.611Z
Updated: 2026-06-10T13:54:39.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48265 vulnerable 2026-07-29 00:55:01.219502 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Published: 2026-06-09T16:48:11.616Z
Updated: 2026-06-10T13:55:42.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47986 vulnerable 2026-07-29 00:55:00.540221 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Published: 2026-06-09T16:48:27.317Z
Updated: 2026-06-10T13:56:46.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47978 vulnerable 2026-07-29 00:55:00.528402 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Published: 2026-06-09T16:48:07.524Z
Updated: 2026-06-10T13:54:00.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47972 vulnerable 2026-07-29 00:55:00.527333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47956 vulnerable 2026-07-29 00:55:00.517450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47943 vulnerable 2026-07-29 00:55:00.498413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34694 vulnerable 2026-07-29 00:43:24.601715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27266 vulnerable 2026-06-08 07:53:22.115713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27265 vulnerable 2026-06-08 07:53:22.115149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27262 vulnerable 2026-06-08 07:53:22.114470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27257 vulnerable 2026-06-08 07:53:22.104421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27256 vulnerable 2026-06-08 07:53:22.103859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27255 vulnerable 2026-06-08 07:53:22.103391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27254 vulnerable 2026-06-08 07:53:22.102716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27253 vulnerable 2026-06-08 07:53:22.102050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27252 vulnerable 2026-06-08 07:53:22.101571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27251 vulnerable 2026-06-08 07:53:22.100871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27250 vulnerable 2026-06-08 07:53:22.096049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27249 vulnerable 2026-06-08 07:53:22.095275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27248 vulnerable 2026-06-08 07:53:22.094562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27247 vulnerable 2026-06-08 07:53:22.093980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27244 vulnerable 2026-06-08 07:53:22.092055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27242 vulnerable 2026-06-08 07:53:22.085121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27241 vulnerable 2026-06-08 07:53:22.084550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27240 vulnerable 2026-06-08 07:53:22.083954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27239 vulnerable 2026-06-08 07:53:22.083461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27237 vulnerable 2026-06-08 07:53:22.073106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27236 vulnerable 2026-06-08 07:53:22.072551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27235 vulnerable 2026-06-08 07:53:22.071910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27234 vulnerable 2026-06-08 07:53:22.071199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27233 vulnerable 2026-06-08 07:53:22.070610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27232 vulnerable 2026-06-08 07:53:22.070085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27231 vulnerable 2026-06-08 07:53:22.069613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27230 vulnerable 2026-06-08 07:53:22.068852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27229 vulnerable 2026-06-08 07:53:22.066053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27228 vulnerable 2026-06-08 07:53:22.065441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27226 vulnerable 2026-06-08 07:53:22.064662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27225 vulnerable 2026-06-08 07:53:22.064289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27224 vulnerable 2026-06-08 07:53:22.063614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27223 vulnerable 2026-06-08 07:53:22.062782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54252 vulnerable 2026-06-08 07:33:12.030205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54251 vulnerable 2026-06-08 07:33:12.029691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54250 vulnerable 2026-06-08 07:33:12.028910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54249 vulnerable 2026-06-08 07:33:12.028269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54248 vulnerable 2026-06-08 07:33:12.027531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54247 vulnerable 2026-06-08 07:33:12.026969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54246 vulnerable 2026-06-08 07:33:12.026267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.