Vulnerability index

Browse CVEs

1,175 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Coldfusion MEDIUM 5.4
CVE-2026-21269

is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into v…

No fix yet
Fix from $4,000 2026-08-11
Coldfusion HIGH 8.5
CVE-2026-48320EPSS 5%

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scri…

Mitigation only
Fix from $1,950 2026-07-14
Commerce MEDIUM 5.4
CVE-2026-48371

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious…

Fix: 1.21.0+
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48355

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48262

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48263

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48253

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48254

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48255

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48257

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48260

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Experience Manager MEDIUM 5.4
CVE-2026-48261

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating th…

Fix: after 2020.5.0
Fix from $1,600 2026-07-14
Commerce HIGH 8.7
CVE-2026-47994

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious…

Fix: 1.21.0+
Fix from $1,950 2026-07-14
Commerce HIGH 8.1
CVE-2026-47995

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject maliciou…

Fix: 1.21.0+
Fix from $1,950 2026-07-14
Coldfusion HIGH 8.8
CVE-2026-48307

ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this …

Mitigation only
Fix from $1,950 2026-06-30
Acrobat HIGH 7.4
CVE-2026-48294

Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attack…

Fix: after 26.5.2.2
Fix from $1,950 2026-06-17
Coldfusion MEDIUM 5.4
CVE-2026-47933

ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privi…

Mitigation only
Fix from $1,600 2026-06-09
Experience Manager HIGH 8.0
CVE-2026-34693

Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An at…

Fix: after 6.5.24.0
Fix from $1,950 2026-06-09
Experience Manager CRITICAL 9.3
CVE-2026-34691

Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that coul…

Fix: after 6.5.24.0
Fix from $2,300 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48297

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48299

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48300

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48301

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48304

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could b…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48266

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attac…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48268

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attac…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48271

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attac…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48280

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attac…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-47993

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attac…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09
Experience Manager MEDIUM 5.4
CVE-2026-48250

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attac…

Fix: 6.5.25.0 / 2026.5.0+
Fix from $1,600 2026-06-09