Vulnerability index

Browse CVEs

1,176 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Experience Manager MEDIUM 6.1
CVE-2018-4929

Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead t…

Fix: after 6.2.0
Fix from $1,600 2018-05-19
Experience Manager MEDIUM 6.1
CVE-2018-4930

Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. Successful exploitation could lead to sensi…

Fix: after 6.3.0
Fix from $1,600 2018-05-19
Experience Manager MEDIUM 6.1
CVE-2018-4931

Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead t…

Fix: after 6.1.0
Fix from $1,600 2018-05-19
Coldfusion MEDIUM 6.1
CVE-2018-4940

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. …

Mitigation only
Fix from $1,600 2018-05-19
Coldfusion MEDIUM 6.1
CVE-2018-4941

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. …

Mitigation only
Fix from $1,600 2018-05-19
Experience Manager MEDIUM 6.1
CVE-2018-4875

Adobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting vulnerability related to the handling of malicious c…

Patch available
Fix from $1,600 2018-02-27
Experience Manager MEDIUM 6.1
CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

Patch available
Fix from $1,600 2018-02-27
Experience Manager MEDIUM 6.1
CVE-2017-3109

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability i…

Mitigation only
Fix from $1,600 2017-12-09
Connect MEDIUM 6.1
CVE-2017-11287

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in informa…

Fix: after 9.6.2
Fix from $1,600 2017-12-09
Connect MEDIUM 6.1
CVE-2017-11288

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in informa…

Fix: after 9.6.2
Fix from $1,600 2017-12-09
Connect MEDIUM 6.1
CVE-2017-11289

An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in informa…

Fix: after 9.6.2
Fix from $1,600 2017-12-09
Experience Manager MEDIUM 6.1
CVE-2017-11296

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has…

Mitigation only
Fix from $1,600 2017-12-09
Coldfusion MEDIUM 6.1
CVE-2017-11285

Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and ea…

Patch available
Fix from $1,600 2017-12-01
Robohelp MEDIUM 6.1
CVE-2017-3104

Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.

Fix: 12.0.4.460 / 2017.0.1+
Fix from $1,600 2017-12-01
Connect MEDIUM 6.1
CVE-2017-3102

Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross…

Fix: after 9.6.1
Fix from $1,600 2017-07-17
Connect MEDIUM 6.1
CVE-2017-3103

Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site …

Fix: after 9.6.1
Fix from $1,600 2017-07-17
Coldfusion MEDIUM 6.1
CVE-2017-3008

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scri…

Patch available
Fix from $1,600 2017-04-27
Campaign MEDIUM 6.1
CVE-2017-2969

Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability.

Fix: after 16.4
Fix from $1,600 2017-02-15
Acrobat MEDIUM 6.1
CVE-2017-2929

Adobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting vulnerability. Successful exploitation could lead t…

Patch available
Fix from $1,600 2017-01-24
Robohelp MEDIUM 6.1
CVE-2016-7891

Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attack…

Fix: after 2015.0.3
Fix from $1,600 2016-12-15
Experience Manager MEDIUM 6.1
CVE-2016-7884

Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting …

Fix: after 6.1.0
Fix from $1,600 2016-12-15
Experience Manager MEDIUM 6.1
CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks.

Patch available
Fix from $1,600 2016-12-15
Experience Manager MEDIUM 6.1
CVE-2016-7882

Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting at…

Fix: after 6.2.0
Fix from $1,600 2016-12-15
Experience Manager Forms MEDIUM 6.1
CVE-2016-6934

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that…

Fix: after 6.2
Fix from $1,600 2016-12-15
Experience Manager MEDIUM 6.1
CVE-2016-6933

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that c…

Patch available
Fix from $1,600 2016-12-15
Connect MEDIUM 6.1
CVE-2016-7851EPSS 7%

Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited i…

Fix: after 9.5.6
Fix from $1,600 2016-11-08
Experience Manager MEDIUM 6.1
CVE-2016-4170

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script …

Patch available
Fix from $1,600 2016-08-09
Experience Manager MEDIUM 6.1
CVE-2016-4168

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HT…

Patch available
Fix from $1,600 2016-08-09
Brackets MEDIUM 6.1
CVE-2016-4164

Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified …

Fix: after 1.6
Fix from $1,600 2016-06-16
Coldfusion MEDIUM 6.1
CVE-2016-4159

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attacker…

Mitigation only
Fix from $1,600 2016-06-16