Latest CVE Feed
-
5.4
MEDIUMCVE-2023-51464
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Jan. 18, 2024
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48611
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48579
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2022-30682
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be exe... Read more
Affected Products : experience_manager- Published: Sep. 16, 2022
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48581
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48586
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48621
Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2022-30686
Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be exe... Read more
Affected Products : experience_manager- Published: Sep. 16, 2022
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48442
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48558
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48574
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48582
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48606
Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48573
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48597
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
5.4
MEDIUMCVE-2023-48620
Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be e... Read more
- Published: Dec. 15, 2023
- Modified: Sep. 19, 2025
-
6.5
MEDIUMCVE-2025-29889
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in... Read more
Affected Products : file_station- Published: Aug. 29, 2025
- Modified: Sep. 19, 2025
- Vuln Type: Denial of Service
-
9.1
CRITICALCVE-2024-48864
A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories. We have already fixed the vulnerability in th... Read more
Affected Products : file_station- Published: Mar. 07, 2025
- Modified: Sep. 19, 2025
- Vuln Type: Authorization
-
6.5
MEDIUMCVE-2025-30262
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in ... Read more
Affected Products : qsync_central- Published: Aug. 29, 2025
- Modified: Sep. 19, 2025
- Vuln Type: Denial of Service
-
7.1
HIGHCVE-2025-30261
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from a... Read more
Affected Products : qsync_central- Published: Aug. 29, 2025
- Modified: Sep. 19, 2025
- Vuln Type: Denial of Service