What’s Vulnerable › Products

Adobe Experience Manager 6.5 LTS vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.

Check whether your Adobe Experience Manager 6.5 LTS version is affected

Latest Adobe Experience Manager 6.5 LTS vulnerabilities

• CVE-2026-90532 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0)
• CVE-2026-90531 — Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 9.6)
• CVE-2026-83960 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-83958 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-83662 — Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3)
• CVE-2026-75732 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9)
• CVE-2026-48383 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0)
• CVE-2026-48382 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0)
• CVE-2026-110082 — Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-110081 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-110074 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-110037 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-109415 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-106634 — Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 7.7)
• CVE-2026-106633 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-106632 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-106631 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-106630 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3)
• CVE-2026-106629 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3)
• CVE-2026-106628 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-106626 — Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 9.1)
• CVE-2026-103848 — Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 9.9)
• CVE-2026-84397 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)