Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:experience_manager:*:-:*:*:lts:*:*:*

part: a version: * update: -

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductExperience Manager (4312bd60-0d9f-5443-9cf9-eaaabd81f028)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19713 vulnerable 2026-09-16 04:34:15.641801 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Published: 2026-09-08T19:56:16.950Z
Updated: 2026-09-11T21:18:40.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-72627 vulnerable 2026-09-16 04:33:09.061391 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Published: 2026-09-08T19:56:33.208Z
Updated: 2026-09-11T13:46:25.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71440 vulnerable 2026-09-16 04:32:59.051889 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Published: 2026-09-08T19:56:05.734Z
Updated: 2026-09-11T21:10:55.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75639 vulnerable 2026-09-16 04:32:53.575357 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Published: 2026-09-08T19:56:19.100Z
Updated: 2026-09-11T13:46:26.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75635 vulnerable 2026-09-16 04:32:53.538819 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
MEDIUM (5.4)
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Published: 2026-09-08T19:56:36.769Z
Updated: 2026-09-11T21:22:29.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75642 vulnerable 2026-09-16 04:32:53.461390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75661 vulnerable 2026-09-16 04:32:53.422853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75668 vulnerable 2026-09-16 04:32:53.371701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75659 vulnerable 2026-09-16 04:32:53.366420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75651 vulnerable 2026-09-16 04:32:53.334747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64868 vulnerable 2026-09-16 04:27:24.677063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64618 vulnerable 2026-09-16 04:27:24.519323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64542 vulnerable 2026-09-16 04:27:23.368352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.