Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior
Críticas / altas1324▼ 116 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
–

183 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.60%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.56%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.56%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.56%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.56%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.56%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.56%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/12/202317/6/2026
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page…
ModificadaMedia (5.4)0.42%—Adobe Experience ManagerAdobe Experience Manager Cloud Service13/9/202317/6/2026
Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.54%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/6/202317/6/2026
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.51%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/6/202317/6/2026
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
ModificadaMedia (5.4)0.51%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/6/202317/6/2026
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.51%—Adobe Experience ManagerAdobe Experience Manager Cloud Service15/6/202317/6/2026
Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.3)0.82%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to…
ModificadaMedia (5.4)0.48%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
ModificadaMedia (5.4)0.48%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
ModificadaMedia (5.4)0.48%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
ModificadaMedia (5.4)0.48%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
ModificadaMedia (5.4)0.48%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
ModificadaMedia (5.4)0.48%—Adobe Experience ManagerAdobe Experience Manager Cloud Service22/3/202317/6/2026
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.