# Vulnerabilities published in 2023 - [CVE-2023-48507](https://insights.sbomify.com/CVE-2023-48507/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48506](https://insights.sbomify.com/CVE-2023-48506/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48505](https://insights.sbomify.com/CVE-2023-48505/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48504](https://insights.sbomify.com/CVE-2023-48504/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48503](https://insights.sbomify.com/CVE-2023-48503/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48502](https://insights.sbomify.com/CVE-2023-48502/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48501](https://insights.sbomify.com/CVE-2023-48501/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48500](https://insights.sbomify.com/CVE-2023-48500/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-4850](https://insights.sbomify.com/CVE-2023-4850/): IBOS OA del sql injection (medium 6.3) - [CVE-2023-48499](https://insights.sbomify.com/CVE-2023-48499/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48498](https://insights.sbomify.com/CVE-2023-48498/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48497](https://insights.sbomify.com/CVE-2023-48497/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48496](https://insights.sbomify.com/CVE-2023-48496/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48495](https://insights.sbomify.com/CVE-2023-48495/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48494](https://insights.sbomify.com/CVE-2023-48494/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48493](https://insights.sbomify.com/CVE-2023-48493/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48492](https://insights.sbomify.com/CVE-2023-48492/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48491](https://insights.sbomify.com/CVE-2023-48491/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48490](https://insights.sbomify.com/CVE-2023-48490/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-4849](https://insights.sbomify.com/CVE-2023-4849/): IBOS OA trash&op=del sql injection (medium 6.3) - [CVE-2023-48489](https://insights.sbomify.com/CVE-2023-48489/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48488](https://insights.sbomify.com/CVE-2023-48488/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48487](https://insights.sbomify.com/CVE-2023-48487/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48486](https://insights.sbomify.com/CVE-2023-48486/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48485](https://insights.sbomify.com/CVE-2023-48485/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48484](https://insights.sbomify.com/CVE-2023-48484/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48483](https://insights.sbomify.com/CVE-2023-48483/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48482](https://insights.sbomify.com/CVE-2023-48482/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48481](https://insights.sbomify.com/CVE-2023-48481/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48480](https://insights.sbomify.com/CVE-2023-48480/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-4848](https://insights.sbomify.com/CVE-2023-4848/): SourceCodester Simple Book Catalog App delete_book.php sql injection (medium 6.3) - [CVE-2023-48479](https://insights.sbomify.com/CVE-2023-48479/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48478](https://insights.sbomify.com/CVE-2023-48478/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48477](https://insights.sbomify.com/CVE-2023-48477/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48476](https://insights.sbomify.com/CVE-2023-48476/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48475](https://insights.sbomify.com/CVE-2023-48475/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48474](https://insights.sbomify.com/CVE-2023-48474/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48473](https://insights.sbomify.com/CVE-2023-48473/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48472](https://insights.sbomify.com/CVE-2023-48472/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48471](https://insights.sbomify.com/CVE-2023-48471/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48470](https://insights.sbomify.com/CVE-2023-48470/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-4847](https://insights.sbomify.com/CVE-2023-4847/): SourceCodester Simple Book Catalog App Update Book Form cross site scripting (low 3.5) - [CVE-2023-48469](https://insights.sbomify.com/CVE-2023-48469/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48468](https://insights.sbomify.com/CVE-2023-48468/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48467](https://insights.sbomify.com/CVE-2023-48467/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48466](https://insights.sbomify.com/CVE-2023-48466/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48465](https://insights.sbomify.com/CVE-2023-48465/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48464](https://insights.sbomify.com/CVE-2023-48464/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48463](https://insights.sbomify.com/CVE-2023-48463/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48462](https://insights.sbomify.com/CVE-2023-48462/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48461](https://insights.sbomify.com/CVE-2023-48461/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48460](https://insights.sbomify.com/CVE-2023-48460/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-4846](https://insights.sbomify.com/CVE-2023-4846/): SourceCodester Simple Membership System delete_member.php sql injection (medium 6.3) - [CVE-2023-48459](https://insights.sbomify.com/CVE-2023-48459/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48458](https://insights.sbomify.com/CVE-2023-48458/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48457](https://insights.sbomify.com/CVE-2023-48457/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48456](https://insights.sbomify.com/CVE-2023-48456/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48455](https://insights.sbomify.com/CVE-2023-48455/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48454](https://insights.sbomify.com/CVE-2023-48454/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48453](https://insights.sbomify.com/CVE-2023-48453/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48452](https://insights.sbomify.com/CVE-2023-48452/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48451](https://insights.sbomify.com/CVE-2023-48451/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48450](https://insights.sbomify.com/CVE-2023-48450/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-4845](https://insights.sbomify.com/CVE-2023-4845/): SourceCodester Simple Membership System account_edit_query.php sql injection (medium 6.3) - [CVE-2023-48449](https://insights.sbomify.com/CVE-2023-48449/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48448](https://insights.sbomify.com/CVE-2023-48448/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48447](https://insights.sbomify.com/CVE-2023-48447/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48446](https://insights.sbomify.com/CVE-2023-48446/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48445](https://insights.sbomify.com/CVE-2023-48445/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2023-48444](https://insights.sbomify.com/CVE-2023-48444/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48443](https://insights.sbomify.com/CVE-2023-48443/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2023-48442](https://insights.sbomify.com/CVE-2023-48442/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-48441](https://insights.sbomify.com/CVE-2023-48441/): Adobe Experience Manager | Improper Access Control (CWE-284) (medium 5.3) - [CVE-2023-48440](https://insights.sbomify.com/CVE-2023-48440/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2023-4844](https://insights.sbomify.com/CVE-2023-4844/): SourceCodester Simple Membership System club_edit_query.php sql injection (medium 6.3) - [CVE-2023-48434](https://insights.sbomify.com/CVE-2023-48434/): Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (critical 9.8) - [CVE-2023-48433](https://insights.sbomify.com/CVE-2023-48433/): Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (critical 9.8) - [CVE-2023-48432](https://insights.sbomify.com/CVE-2023-48432/): Cross-site scripting in zimbra:collaboration (medium 6.1) - [CVE-2023-48431](https://insights.sbomify.com/CVE-2023-48431/): Denial of service in SINEC INS (medium 6.8) - [CVE-2023-48430](https://insights.sbomify.com/CVE-2023-48430/): Denial of service in SINEC INS (low 2.7) - [CVE-2023-4843](https://insights.sbomify.com/CVE-2023-4843/): Cross-site scripting in Pega Platform (medium 4.3) - [CVE-2023-48429](https://insights.sbomify.com/CVE-2023-48429/): Denial of service in SINEC INS (low 2.7) - [CVE-2023-48428](https://insights.sbomify.com/CVE-2023-48428/): Command injection in SINEC INS (high 7.2) - [CVE-2023-48427](https://insights.sbomify.com/CVE-2023-48427/): Security feature bypass in SINEC INS (high 8.1) - [CVE-2023-48426](https://insights.sbomify.com/CVE-2023-48426/): Chromecast Bootloader & Kernel-level code-execution including compromise of user-data (critical 10.0) - [CVE-2023-48425](https://insights.sbomify.com/CVE-2023-48425/): Other in Android (critical 9.8) - [CVE-2023-48424](https://insights.sbomify.com/CVE-2023-48424/): Privilege escalation in Android (critical 9.8) - [CVE-2023-48423](https://insights.sbomify.com/CVE-2023-48423/): Memory corruption in Android (critical 9.8) - [CVE-2023-48422](https://insights.sbomify.com/CVE-2023-48422/): Memory corruption in Android (medium 5.5) - [CVE-2023-48421](https://insights.sbomify.com/CVE-2023-48421/): Memory corruption in Android (high 7.8) - [CVE-2023-48420](https://insights.sbomify.com/CVE-2023-48420/): Use after free in Android (medium 6.4) - [CVE-2023-4842](https://insights.sbomify.com/CVE-2023-4842/): Cross-site scripting in Social Sharing Plugin – Social Warfare (medium 6.4) - [CVE-2023-48419](https://insights.sbomify.com/CVE-2023-48419/): An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP (critical 10.0) - [CVE-2023-48418](https://insights.sbomify.com/CVE-2023-48418/): User Build misconfiguration resulting in local escalation of privilege (critical 10.0) - [CVE-2023-48417](https://insights.sbomify.com/CVE-2023-48417/): Missing authorization in Android (critical 9.8) - [CVE-2023-48416](https://insights.sbomify.com/CVE-2023-48416/): Null dereference in Android (high 7.5) - [CVE-2023-48415](https://insights.sbomify.com/CVE-2023-48415/): Memory corruption in Android (medium 5.5) - [CVE-2023-48414](https://insights.sbomify.com/CVE-2023-48414/): Use after free in Android (medium 6.7) - [CVE-2023-48413](https://insights.sbomify.com/CVE-2023-48413/): Memory corruption in Android (medium 4.9) - [CVE-2023-48412](https://insights.sbomify.com/CVE-2023-48412/): Information disclosure in Android (medium 5.5) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/189/