CVE-2021-43764High 8.0Adobe Experience Manager Stored XSS in the Spin Set1.6%
CVE-2021-44176High 8.1Adobe Experience Manager Stored XSS in workflow Stages parameter1.6%
CVE-2021-43761High 8.0Adobe Experience Manager Stored XSS on Edit Tag page via Localization input1.1%
CVE-2021-44177High 8.1Adobe Experience Manager Stored XSS in user name parameter in the package manager1.6%
CVE-2021-40722Critical 9.8AEM Forms Improper Restriction of XML External Entity Reference3.4%
CVE-2021-43765High 8.1Adobe Experience Manager Stored XSS in the Carousel Set1.6%
CVE-2021-44178Medium 5.4Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html1.5%
CVE-2021-43762Medium 6.5Adobe Experience Manager Unicode normalization leads to dispatcher bypass1.7%
CVE-2021-40712Medium 6.5Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS1.7%
CVE-2021-40714Medium 6.1Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter1.1%
CVE-2021-40713Medium 5.9Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack1.0%
CVE-2021-40711Medium 5.4Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution1.5%
CVE-2021-28627Medium 5.4Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass1.3%
CVE-2021-28628Medium 6.3Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp1.0%
CVE-2021-28625Medium 6.3Adobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jsp1.0%
CVE-2021-28626Low 3.7Adobe Experience Manager Improper Authorization at /content/usergenerated1.3%
CVE-2021-21084High 7.3Adobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code execution1.8%
CVE-2021-21083High 7.5Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service2.0%
CVE-2021-21043Medium 6.1Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools3.4%
CVE-2020-24444Medium 5.8Blind SSRF in Forms add-on for AEM2.1%
CVE-2020-9743Medium 5.3HTML injection in AEM's content editor component2.0%
CVE-2020-9734Critical 9.0Stored XSS in AEM Forms component1.9%
CVE-2020-9742Critical 9.0Reflected XSS in AEM Inbox module1.8%
CVE-2020-9741Critical 9.0Stored XSS in AEM Forms Components1.9%
CVE-2020-9736Medium 6.8Stored XSS in AEM's Content Repository Development Environment1.8%
CVE-2020-9735Medium 6.8Stored XSS in AEM's Content Repository Development Environment1.8%
CVE-2020-9732Critical 9.0Stored XSS in AEM Sites Components2.8%
CVE-2020-9738Medium 6.8Stored XSS in AEM's Content Repository Development Environment1.7%
CVE-2020-9737Medium 6.8Stored XSS in AEM's Content Repository Development Environment1.7%
CVE-2020-9733High 7.5Sensitive information disclosure possible in AEM3.8%
CVE-2020-9740Critical 9.0Stored XSS in AEM Design Importer Component1.9%