What’s Vulnerable › Products

Adobe Experience Manager as a Cloud Service vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Adobe Experience Manager as a Cloud Service version is affected

Latest Adobe Experience Manager as a Cloud Service vulnerabilities

• CVE-2026-90532 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0)
• CVE-2026-90531 — Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 9.6)
• CVE-2026-83960 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-83958 — Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
• CVE-2026-83662 — Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3)
• CVE-2026-48383 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0)
• CVE-2026-48382 — Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 10.0)
• CVE-2026-106626 — Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 9.1)
• CVE-2026-84397 — Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)