CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Adobe : Security Vulnerabilities

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2023-26426 416 Exec Code 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
2 CVE-2023-26361 22 Dir. Trav. 2023-03-23 2023-03-28
0.0
 None ??? ??? ??? ??? ??? ???
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in Arbitrary file system read. Exploitation of this issue does not require user interaction, but does require administrator privileges.
3 CVE-2023-26360 284 Exec Code 2023-03-23 2023-03-28
0.0
 None ??? ??? ??? ??? ??? ???
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
4 CVE-2023-26359 502 Exec Code 2023-03-23 2023-03-28
0.0
 None ??? ??? ??? ??? ??? ???
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
5 CVE-2023-26358 426 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts.
6 CVE-2023-25862 125 Bypass 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
7 CVE-2023-25861 787 Exec Code 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
8 CVE-2023-25860 787 Exec Code 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
9 CVE-2023-22271 326 Bypass 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass. A low-privileged attacker can exploit this in order to decrypt a user's password. The attack complexity is high since a successful exploitation requires to already have in possession this encrypted secret.
10 CVE-2023-22269 79 XSS 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
11 CVE-2023-22266 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
12 CVE-2023-22265 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
13 CVE-2023-22264 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
14 CVE-2023-22263 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
15 CVE-2023-22262 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
16 CVE-2023-22261 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
17 CVE-2023-22260 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
18 CVE-2023-22259 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
19 CVE-2023-22258 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
20 CVE-2023-22257 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
21 CVE-2023-22256 601 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
22 CVE-2023-22254 79 XSS 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
23 CVE-2023-22253 79 XSS 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
24 CVE-2023-22252 79 XSS 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
25 CVE-2023-22232 284 Bypass 2023-02-17 2023-03-20
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.
26 CVE-2023-21616 79 XSS 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
27 CVE-2023-21615 79 XSS 2023-03-22 2023-03-24
0.0
 None ??? ??? ??? ??? ??? ???
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
28 CVE-2022-44510 79 XSS 2022-12-22 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
29 CVE-2022-44488 601 2022-12-19 2022-12-23
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
30 CVE-2022-44474 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
31 CVE-2022-44473 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
32 CVE-2022-44471 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
33 CVE-2022-44470 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
34 CVE-2022-44469 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
35 CVE-2022-44468 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
36 CVE-2022-44467 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
37 CVE-2022-44466 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
38 CVE-2022-44465 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
39 CVE-2022-44463 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
40 CVE-2022-44462 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
41 CVE-2022-42367 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
42 CVE-2022-42366 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
43 CVE-2022-42365 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
44 CVE-2022-42364 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
45 CVE-2022-42362 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
46 CVE-2022-42360 79 XSS 2022-12-16 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
47 CVE-2022-42357 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
48 CVE-2022-42356 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
49 CVE-2022-42354 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
50 CVE-2022-42352 79 XSS 2022-12-19 2023-01-06
0.0
 None ??? ??? ??? ??? ??? ???
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Total number of vulnerabilities : 1510   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.