Browse CVEs

CRITICAL 10.0 CVE-2026-48331 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitatio… Campaign after 7.4.2 Fix from $2,3002026-08-03 HIGH 8.2 CVE-2026-48290 CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the contex… C2pa after 0.84.0 Fix from $1,9502026-07-14 HIGH 7.7 CVE-2026-48332EPSS 11% ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacke… Coldfusion Mitigation only Fix from $1,9502026-07-14 CRITICAL 9.6 CVE-2026-48259 Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the conte… Experience Manager after 2020.5.0 Fix from $2,3002026-07-14 HIGH 8.6 CVE-2026-48285 ColdFusion versions 2025.9, 2023.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security fe… Coldfusion Mitigation only Fix from $1,9502026-06-30 CRITICAL 10.0 CVE-2026-47938 Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu… Campaign after 7.4.2 Fix from $2,3002026-06-09 HIGH 7.4 CVE-2026-34647 Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (S… Commerce 1.3.3 / 2.4.4+ Fix from $1,9502026-05-12 MEDIUM 5.5 CVE-2026-21293 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (… Commerce 1.3.3 / 2.4.4+ Fix from $1,6002026-03-11 MEDIUM 5.5 CVE-2026-21294 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (… Commerce 1.3.3 / 2.4.4+ Fix from $1,6002026-03-11 MEDIUM 6.5 CVE-2025-54249 Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Secu… Experience Manager after 2025.8.0 Fix from $1,6002025-09-09 MEDIUM 6.2 CVE-2025-49545 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitr… Coldfusion Mitigation only Fix from $1,6002025-07-08 HIGH 7.7 CVE-2024-49521 Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature by… Commerce 3.2.6+ Fix from $1,9502024-11-12 HIGH 8.8 CVE-2024-34111 Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could… Commerce after 1.4.0 Fix from $1,9502024-06-13 MEDIUM 6.8 CVE-2023-26366 Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server… Commerce Mitigation only Fix from $1,6002023-10-13 MEDIUM 6.5 CVE-2022-42343 Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead… Campaign 7.3.2 / 8.4.2+ Fix from $1,6002022-12-16 MEDIUM 6.6 CVE-2021-36043 Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundl… Adobe Commerce after 2.4.2 Fix from $1,6002021-09-01 HIGH 8.8 CVE-2021-28627 Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Server-side Request Forgery. An authenticat… Experience Manager after 6.5.8.0 Fix from $1,9502021-08-24 HIGH 8.6 CVE-2021-21009 Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.… Campaign Classic after 20.3.1 Fix from $1,9502021-01-13 MEDIUM 5.8 CVE-2020-24444 AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Req… Experience Manager Forms Add On Mitigation only Fix from $1,6002020-12-10 HIGH 7.5 CVE-2020-9643 Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sens… Experience Manager 6.4.8.1 / 6.5.5.0+ Fix from $1,9502020-06-12 HIGH 7.5 CVE-2020-9645 Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead t… Experience Manager 6.4.8.1 / 6.5.5.0+ Fix from $1,9502020-06-12 HIGH 7.5 CVE-2020-3769 Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sens… Experience Manager after 6.5.0 Fix from $1,9502020-03-25 HIGH 7.5 CVE-2018-12809 Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive i… Experience Manager after 6.4.0 Fix from $1,9502018-07-20 HIGH 7.5 CVE-2018-5004 Adobe Experience Manager versions 6.2 and 6.3 have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive infor… Experience Manager 6.4.0+ Fix from $1,9502018-07-20 HIGH 7.5 CVE-2018-5006EPSS 54% Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive i… Experience Manager after 6.4.0 Fix from $1,9502018-07-20 CRITICAL 10.0 CVE-2017-11291EPSS 6% An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused t… Connect after 9.6.2 Fix from $2,3002017-12-09