Vulnerability index

Browse CVEs

1,175 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Connect HIGH 8.1
CVE-2025-49552

Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a high-privil…

Fix: 12.10+
Fix from $1,950 2025-10-14
Commerce HIGH 8.1
CVE-2025-54264

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (…

Mitigation only
Fix from $1,950 2025-10-14
Experience Manager MEDIUM 5.4
CVE-2025-54252

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a lo…

Fix: after 2025.8.0
Fix from $1,600 2025-09-09
Experience Manager MEDIUM 5.4
CVE-2025-47054

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46962

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46998

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46849

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46852

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46856

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46932

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Experience Manager MEDIUM 5.4
CVE-2025-46936

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-20
Commerce HIGH 8.7
CVE-2025-49557

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (…

Fix: 1.3.3 / 2.4.4+
Fix from $1,950 2025-08-12
Experience Manager MEDIUM 5.4
CVE-2025-46958

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-08-05
Experience Manager MEDIUM 5.4
CVE-2025-47001

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.22.0 / 2025.5.0+
Fix from $1,600 2025-07-30
Experience Manager MEDIUM 5.4
CVE-2025-46993

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5+
Fix from $1,600 2025-07-24
Experience Manager MEDIUM 5.4
CVE-2025-46996

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5+
Fix from $1,600 2025-07-24
Experience Manager MEDIUM 5.4
CVE-2025-47061

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5+
Fix from $1,600 2025-07-24
Experience Manager MEDIUM 5.4
CVE-2025-46959

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker …

Fix: 6.5.23.0 / 2025.5+
Fix from $1,600 2025-07-16
Experience Manager MEDIUM 5.4
CVE-2025-47053

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low privileged attacker …

Fix: 6.5.23.0 / 2025.5+
Fix from $1,600 2025-07-16
Experience Manager MEDIUM 5.4
CVE-2025-49534

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-…

Mitigation only
Fix from $1,600 2025-07-08
Experience Manager MEDIUM 5.4
CVE-2025-49547

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-…

Mitigation only
Fix from $1,600 2025-07-08
Coldfusion MEDIUM 5.2
CVE-2025-49542

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated …

Mitigation only
Fix from $1,600 2025-07-08
Experience Manager MEDIUM 5.4
CVE-2025-47116

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 5.4
CVE-2025-47117

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 5.4
CVE-2025-47113

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 5.4
CVE-2025-47114

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 5.4
CVE-2025-47115

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 6.1
CVE-2025-47094

Adobe Experience Manager versions 6.5.22 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 5.4
CVE-2025-47088

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10
Experience Manager MEDIUM 5.4
CVE-2025-47089

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low …

Fix: 6.5.23.0 / 2025.5.0+
Fix from $1,600 2025-06-10