DeutschShown in its original language — a full translation is planned for a future version.
Adobe Experience Manager: Mehrere Schwachstellen
view advisory published 2026-10-13
Ein Angreifer kann mehrere Schwachstellen in Adobe Experience Manager ausnutzen, um Privilegien zu eskalieren, beliebigen Programmcode auszuführen, oder Sicherheitsvorkehrungen zu umgehen.
01
describes (35)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-90532US | critical10.0OT elevated | — | ||
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini… | ||||
| CVE-2026-90531US | — | — | ||
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged a… | ||||
| CVE-2026-83960US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-83958US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-83662US | critical9.3 | — | ||
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web pa… | ||||
| CVE-2026-75732US | critical9.9OT elevated | — | ||
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini… | ||||
| CVE-2026-48398US | — | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-48383US | critical10.0OT elevated | — | ||
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini… | ||||
| CVE-2026-48382US | critical10.0OT elevated | — | ||
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini… | ||||
| CVE-2026-110084US | high7.1 | — | ||
Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attacker could l… | ||||
| CVE-2026-110083US | high7.1 | — | ||
Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security featur… | ||||
| CVE-2026-110082US | — | — | ||
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a… | ||||
| CVE-2026-110081US | medium5.4 | — | ||
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera… | ||||
| CVE-2026-110080US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-110079US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-110078US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-110077US | — | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-110076US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-110075US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
| CVE-2026-110074US | medium5.4 | — | ||
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma… | ||||
showing 20 of 35
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan