Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Adobe
Adobe Experience Manager 6 5

Adobe Experience Manager 6.5 Vulnerabilities: CVEs, CISA KEV & Security Advisories

213 CVEs

Adobe Experience Manager 6.5 Vulnerabilities

CVE security advisories and vulnerability history for Adobe Experience Manager 6.5 by Adobe.

213

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.5

Avg CVSS

2026–2026

Last updated September 16, 2026

Overview

Adobe Experience Manager 6.5 has 213 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Adobe Experience Manager 6.5, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Adobe Experience Manager 6.5's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High3

Medium203

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Adobe Experience Manager 6.5's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Adobe Experience Manager 6.5 CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Adobe Experience Manager 6.5 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 6.5.24167 CVEs
>= 6.5.25167 CVEs
<= 6.5.2333 CVEs
>= 6.5.2433 CVEs
<= 6.5.2513 CVEs
>= 6.5.25 - Hotfix for NPR-4397113 CVEs

Fixed in

6.5.25167 CVEs
6.5.2433 CVEs
6.5.25 - Hotfix for NPR-4397113 CVEs

Find a version

213 CVEs

Sort

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-84397
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.4% (34th pct)2026-09-16
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-71357
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75678
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-71565
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.2% (9th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75687
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75672
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75734
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75706
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75730
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75719
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75707
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75690
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75715
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-64838
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75646
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.2% (9th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75640
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.2% (9th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75643
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.2% (11th pct)2026-09-08
Adobe Experience Manager | Improper Input Validation (CWE-20)
CVE-2026-75726
Patch
CWE-20
Low · CVSS 3.5
EPSS 0.4% (30th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-19612
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75660
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.2% (9th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-19479
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75735
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75637
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75705
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75694
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75741
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75679
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-64830
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75729
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (20th pct)2026-09-08
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-75685
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2026-09-08

Showing 30 of 213

Common weakness types

The CWE weakness categories most often found in Adobe Experience Manager 6.5 CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')204 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-306Missing Authentication for Critical Function1 CVE
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVE
CWE-611Improper Restriction of XML External Entity Reference1 CVE
CWE-863Incorrect Authorization1 CVE
CWE-918Server-Side Request Forgery (SSRF)1 CVE
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Other Adobe products

Browse vulnerabilities for other products by Adobe.

acrobat dc1,838 CVEs acrobat reader dc1,838 CVEs acrobat1,415 CVEs experience manager1,269 CVEs Acrobat Reader1,159 CVEs flash player1,084 CVEs Adobe Experience Manager928 CVEs Adobe Acrobat and Reader516 CVEs

All Adobe vulnerabilities

Frequently asked questions

Common questions about Adobe Experience Manager 6.5 vulnerabilities.

How many CVEs does Adobe Adobe Experience Manager 6.5 have?: Adobe Adobe Experience Manager 6.5 has 213 published CVE records since 2026.
How many Adobe Adobe Experience Manager 6.5 CVEs are in CISA KEV?: None of Adobe Adobe Experience Manager 6.5's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Adobe Adobe Experience Manager 6.5 vulnerabilities?: No Adobe Adobe Experience Manager 6.5 CVEs currently have a tracked public exploit in this dataset.
Which versions of Adobe Adobe Experience Manager 6.5 are affected?: 9 distinct Adobe Adobe Experience Manager 6.5 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Adobe Adobe Experience Manager 6.5 CVEs?: Adobe Adobe Experience Manager 6.5's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-306 (Missing Authentication for Critical Function), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
How many critical Adobe Adobe Experience Manager 6.5 vulnerabilities are there?: Adobe Adobe Experience Manager 6.5 has 4 critical and 3 high-severity CVEs.
What is the average severity of Adobe Adobe Experience Manager 6.5 CVEs?: The average CVSS base score across Adobe Adobe Experience Manager 6.5's scored CVEs is 5.5.

References

All Adobe vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Adobe Experience Manager 6.5 vulnerabilities

Monitor new Adobe Experience Manager 6.5 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References