{"schema_version":1,"title":"Adobe Experience Manager as a Cloud Service vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in Adobe Experience Manager as a Cloud Service: 0 in the last 7 days and 12 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-48359, was published on 14 July 2026.","url":"https://junglewise.ai/threats/technologies/experience-manager-as-a-cloud-service","json_url":"https://junglewise.ai/threats/technologies/experience-manager-as-a-cloud-service.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/experience-manager-as-a-cloud-service","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":12,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":12,"last_365_days":12},"latest":[{"cve":"CVE-2026-48359","cvss":9.6,"slug":"cve-2026-48359-adobe-experience-manager-xxe-vulnerability","title":"Adobe Experience Manager XXE vulnerability","severity":"critical","exploited":false,"published_at":"2026-07-14T20:17:08.81+00:00","url":"https://junglewise.ai/threats/cve-2026-48359-adobe-experience-manager-xxe-vulnerability"},{"cve":"CVE-2026-48355","cvss":5.4,"slug":"cve-2026-48355-adobe-experience-manager-stored-xss-in-form-fields","title":"Adobe Experience Manager stored XSS in form fields","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:08.3+00:00","url":"https://junglewise.ai/threats/cve-2026-48355-adobe-experience-manager-stored-xss-in-form-fields"},{"cve":"CVE-2026-48310","cvss":8.6,"slug":"cve-2026-48310-adobe-experience-manager-path-traversal-in-file-system-access","title":"Adobe Experience Manager path traversal in file system access","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:07.45+00:00","url":"https://junglewise.ai/threats/cve-2026-48310-adobe-experience-manager-path-traversal-in-file-system-access"},{"cve":"CVE-2026-48263","cvss":5.4,"slug":"cve-2026-48263-adobe-experience-manager-stored-xss-in-form-fields","title":"Adobe Experience Manager stored XSS in form fields","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:07.213+00:00","url":"https://junglewise.ai/threats/cve-2026-48263-adobe-experience-manager-stored-xss-in-form-fields"},{"cve":"CVE-2026-48262","cvss":5.4,"slug":"cve-2026-48262-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:07.073+00:00","url":"https://junglewise.ai/threats/cve-2026-48262-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48261","cvss":5.4,"slug":"cve-2026-48261-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.95+00:00","url":"https://junglewise.ai/threats/cve-2026-48261-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48259","cvss":9.6,"slug":"cve-2026-48259-adobe-experience-manager-ssrf-leading-to-code-execution","title":"Adobe Experience Manager SSRF leading to code execution","severity":"critical","exploited":false,"published_at":"2026-07-14T20:17:06.697+00:00","url":"https://junglewise.ai/threats/cve-2026-48259-adobe-experience-manager-ssrf-leading-to-code-execution"},{"cve":"CVE-2026-48257","cvss":5.4,"slug":"cve-2026-48257-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.57+00:00","url":"https://junglewise.ai/threats/cve-2026-48257-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48255","cvss":5.4,"slug":"cve-2026-48255-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.443+00:00","url":"https://junglewise.ai/threats/cve-2026-48255-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48254","cvss":5.4,"slug":"cve-2026-48254-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.32+00:00","url":"https://junglewise.ai/threats/cve-2026-48254-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48253","cvss":5.4,"slug":"cve-2026-48253-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.197+00:00","url":"https://junglewise.ai/threats/cve-2026-48253-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48252","cvss":8.6,"slug":"cve-2026-48252-adobe-experience-manager-authentication-bypass-in-critical","title":"Adobe Experience Manager authentication bypass in critical functions","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:06.053+00:00","url":"https://junglewise.ai/threats/cve-2026-48252-adobe-experience-manager-authentication-bypass-in-critical"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":2,"exploited":0,"vulnerabilities":12},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Adobe ColdFusion","slug":"coldfusion","vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/coldfusion"},{"name":"Adobe Acrobat","slug":"acrobat","vulnerabilities":63,"url":"https://junglewise.ai/threats/technologies/acrobat"},{"name":"Adobe Commerce","slug":"commerce","vulnerabilities":62,"url":"https://junglewise.ai/threats/technologies/commerce"},{"name":"Adobe Acrobat Reader","slug":"acrobat-reader","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/acrobat-reader"},{"name":"Adobe Flash Player","slug":"flash-player","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/flash-player"},{"name":"Adobe AIR","slug":"air","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/air"},{"name":"Adobe Acrobat DC","slug":"acrobat-dc","vulnerabilities":39,"url":"https://junglewise.ai/threats/technologies/acrobat-dc"},{"name":"Adobe Acrobat Reader DC","slug":"acrobat-reader-dc","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/acrobat-reader-dc"},{"name":"Adobe Reader","slug":"reader","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/reader"},{"name":"Adobe Bridge","slug":"bridge","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/bridge"},{"name":"Adobe Campaign Classic","slug":"campaign-classic","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/campaign-classic"},{"name":"Adobe InDesign","slug":"indesign","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/indesign"}],"technology":{"hub":true,"name":"Adobe Experience Manager as a Cloud Service","slug":"experience-manager-as-a-cloud-service","vendor":{"name":"Adobe","slug":"adobe","url":"https://junglewise.ai/threats/vendors/adobe"},"aliases":[],"category":"cms","homepage":"https://business.adobe.com/products/experience-manager/cloud-service.html","repo_url":"https://business.adobe.com/products/experience-manager/cloud-service.html","description":"A cloud-based content management system for digital experience management.","url":"https://junglewise.ai/threats/technologies/experience-manager-as-a-cloud-service"},"most_severe":[{"cve":"CVE-2026-48359","cvss":9.6,"slug":"cve-2026-48359-adobe-experience-manager-xxe-vulnerability","title":"Adobe Experience Manager XXE vulnerability","severity":"critical","exploited":false,"published_at":"2026-07-14T20:17:08.81+00:00","url":"https://junglewise.ai/threats/cve-2026-48359-adobe-experience-manager-xxe-vulnerability"},{"cve":"CVE-2026-48259","cvss":9.6,"slug":"cve-2026-48259-adobe-experience-manager-ssrf-leading-to-code-execution","title":"Adobe Experience Manager SSRF leading to code execution","severity":"critical","exploited":false,"published_at":"2026-07-14T20:17:06.697+00:00","url":"https://junglewise.ai/threats/cve-2026-48259-adobe-experience-manager-ssrf-leading-to-code-execution"},{"cve":"CVE-2026-48310","cvss":8.6,"slug":"cve-2026-48310-adobe-experience-manager-path-traversal-in-file-system-access","title":"Adobe Experience Manager path traversal in file system access","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:07.45+00:00","url":"https://junglewise.ai/threats/cve-2026-48310-adobe-experience-manager-path-traversal-in-file-system-access"},{"cve":"CVE-2026-48252","cvss":8.6,"slug":"cve-2026-48252-adobe-experience-manager-authentication-bypass-in-critical","title":"Adobe Experience Manager authentication bypass in critical functions","severity":"high","exploited":false,"published_at":"2026-07-14T20:17:06.053+00:00","url":"https://junglewise.ai/threats/cve-2026-48252-adobe-experience-manager-authentication-bypass-in-critical"},{"cve":"CVE-2026-48355","cvss":5.4,"slug":"cve-2026-48355-adobe-experience-manager-stored-xss-in-form-fields","title":"Adobe Experience Manager stored XSS in form fields","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:08.3+00:00","url":"https://junglewise.ai/threats/cve-2026-48355-adobe-experience-manager-stored-xss-in-form-fields"},{"cve":"CVE-2026-48263","cvss":5.4,"slug":"cve-2026-48263-adobe-experience-manager-stored-xss-in-form-fields","title":"Adobe Experience Manager stored XSS in form fields","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:07.213+00:00","url":"https://junglewise.ai/threats/cve-2026-48263-adobe-experience-manager-stored-xss-in-form-fields"},{"cve":"CVE-2026-48262","cvss":5.4,"slug":"cve-2026-48262-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:07.073+00:00","url":"https://junglewise.ai/threats/cve-2026-48262-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48261","cvss":5.4,"slug":"cve-2026-48261-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.95+00:00","url":"https://junglewise.ai/threats/cve-2026-48261-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48257","cvss":5.4,"slug":"cve-2026-48257-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.57+00:00","url":"https://junglewise.ai/threats/cve-2026-48257-adobe-experience-manager-dom-based-xss"},{"cve":"CVE-2026-48255","cvss":5.4,"slug":"cve-2026-48255-adobe-experience-manager-dom-based-xss","title":"Adobe Experience Manager DOM-based XSS","severity":"medium","exploited":false,"published_at":"2026-07-14T20:17:06.443+00:00","url":"https://junglewise.ai/threats/cve-2026-48255-adobe-experience-manager-dom-based-xss"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}