Adobe Experience Manager vulnerabilities
1,281 published vulnerabilities in Adobe Experience Manager. The most were published in 2025 (378), and 219 so far in 2026.
Adobe Experience Manager vulnerabilities by year
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Adobe Experience Manager vulnerabilities
- CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2026-105895 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-19232 Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2025-49533 Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)
- CVE-2021-40722 AEM Forms Improper Restriction of XML External Entity Reference
- CVE-2019-8088 Command injection in Adobe Experience Manager
- CVE-2019-7964 Auth bypass in Adobe Experience Manager
- CVE-2017-3108 File upload in Experience Manager
- CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-48259 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48359 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-106629 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.