Browse CVEs

MEDIUM 6.1 CVE-2018-4930 Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. Successful exploitation could lead to sensi… Experience Manager after 6.3.0 Fix from $1,6002018-05-19 MEDIUM 6.1 CVE-2018-4931 Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead t… Experience Manager after 6.1.0 Fix from $1,6002018-05-19 MEDIUM 6.1 CVE-2018-4940 Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. … Coldfusion Mitigation only Fix from $1,6002018-05-19 MEDIUM 6.1 CVE-2018-4941 Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. … Coldfusion Mitigation only Fix from $1,6002018-05-19 MEDIUM 6.1 CVE-2018-4875 Adobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting vulnerability related to the handling of malicious c… Experience Manager Patch available Fix from $1,6002018-02-27 MEDIUM 6.1 CVE-2018-4876 Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function. Experience Manager Patch available Fix from $1,6002018-02-27 MEDIUM 6.1 CVE-2017-3109 An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability i… Experience Manager Mitigation only Fix from $1,6002017-12-09 MEDIUM 6.1 CVE-2017-11287 An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in informa… Connect after 9.6.2 Fix from $1,6002017-12-09 MEDIUM 6.1 CVE-2017-11288 An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in informa… Connect after 9.6.2 Fix from $1,6002017-12-09 MEDIUM 6.1 CVE-2017-11289 An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in informa… Connect after 9.6.2 Fix from $1,6002017-12-09 MEDIUM 6.1 CVE-2017-11296 An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has… Experience Manager Mitigation only Fix from $1,6002017-12-09 MEDIUM 6.1 CVE-2017-11285 Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and ea… Coldfusion Patch available Fix from $1,6002017-12-01 MEDIUM 6.1 CVE-2017-3104 Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2. Robohelp 12.0.4.460 / 2017.0.1+ Fix from $1,6002017-12-01 MEDIUM 6.1 CVE-2017-3102 Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross… Connect after 9.6.1 Fix from $1,6002017-07-17 MEDIUM 6.1 CVE-2017-3103 Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site … Connect after 9.6.1 Fix from $1,6002017-07-17 MEDIUM 6.1 CVE-2017-3008 Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scri… Coldfusion Patch available Fix from $1,6002017-04-27 MEDIUM 6.1 CVE-2017-2969 Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability. Campaign after 16.4 Fix from $1,6002017-02-15 MEDIUM 6.1 CVE-2017-2929 Adobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting vulnerability. Successful exploitation could lead t… Acrobat Patch available Fix from $1,6002017-01-24 MEDIUM 6.1 CVE-2016-7891 Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attack… Robohelp after 2015.0.3 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-7884 Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting … Experience Manager after 6.1.0 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-7883 Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks. Experience Manager Patch available Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-7882 Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting at… Experience Manager after 6.2.0 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6934 Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that… Experience Manager Forms after 6.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6933 Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that c… Experience Manager Patch available Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-7851EPSS 7% Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited i… Connect after 9.5.6 Fix from $1,6002016-11-08 MEDIUM 6.1 CVE-2016-4170 Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script … Experience Manager Patch available Fix from $1,6002016-08-09 MEDIUM 6.1 CVE-2016-4168 Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HT… Experience Manager Patch available Fix from $1,6002016-08-09 MEDIUM 6.1 CVE-2016-4164 Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified … Brackets after 1.6 Fix from $1,6002016-06-16 MEDIUM 6.1 CVE-2016-4159 Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attacker… Coldfusion Mitigation only Fix from $1,6002016-06-16 MEDIUM 6.1 CVE-2016-1113 Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attacker… Coldfusion Mitigation only Fix from $1,6002016-05-11