Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-64615Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64873Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64590Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64557Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64790Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64585Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64797Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64579Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64869Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64796Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64603Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64792Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64575Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64802Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64793Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64594Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64614Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64872Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64562Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2025-61808ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2025-61813ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-61812ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-61821ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-64898ColdFusion | Insufficiently Protected Credentials (CWE-522)
- CVE-2025-61810ColdFusion | Deserialization of Untrusted Data (CWE-502)
- CVE-2025-61809ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-61822ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-64897ColdFusion | Improper Access Control (CWE-284)
- CVE-2025-61823ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-61811ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)