CVE-2019-8088: Adobe Experience Manager

Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days.

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Experience Manager: version 6.2 only; version 6.3 only; version 6.4 only; version 6.5 only

Published 2019-10-25. Last modified 2026-06-17.