Browse / Adobe

Adobe

See its reports on the map

What gets reported to Adobe

• Cross-site Scripting14
• Information Disclosure2
• Access Control2
• Misconfiguration1
• Code Execution1
• Business Logic1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Disclosure of git metadata and springboot actuator informationInformation Disclosure
   58 votes
2. Registration Information Leakage Improper Access Control - Generic
   58 votes
3. Unauthenticated Varnish Cache PurgeMisconfiguration
   44 votes
4. DOM XSS at `https://adobedocs.github.io/OAE_PartnerAPI/?configUrl={site}` due to outdated Swagger UICross-site Scripting (XSS) - DOM
   38 votes
5. Log4j Java RCE in [beta.dev.adobeconnect.com]Code Injection
   34 votes
6. Parameter tampering can result in product price manipulationBusiness Logic Errors
   33 votes
7. Adobe Experience Manager 'Childlist selector' - Cross-Site Scripting on cbconnection-stage.adobe.com Cross-site Scripting (XSS) - Reflected
   29 votes
8. Adobe Experience Manager 'Childlist selector' - Cross-Site Scripting on cbconnection.adobe.comCross-site Scripting (XSS) - Reflected
   24 votes
9. Main Domain Takeover at https://www.marketo.net/Privilege Escalation
   22 votes
10. Reflected Cross site scripting via Swagger UICross-site Scripting (XSS) - Reflected
    22 votes
11. HTML INJECTION FOUND ON https://adobedocs.github.io/analytics-1.4-apis/swagger-docs.html DUE TO OUTDATED SWAGGER UICross-site Scripting (XSS) - DOM
    18 votes
12. AEM forms XXE VulnerabilityXML External Entities (XXE)
    18 votes
13. DOM XSS on www.adobe.comCross-site Scripting (XSS) - DOM
    18 votes
14. Disclosure of github access token in config file via nignx off-by-slashPath Traversal
    15 votes
15. DOM XSS at `https://adobedocs.github.io/indesign-api-docs/?configUrl={site}` due to outdated Swagger UICross-site Scripting (XSS) - DOM
    14 votes
16. HTML INJECTION on https://adobedocs.github.io/JourneyAPI/ due to outdated SWAGGER UICross-site Scripting (XSS) - DOM
    13 votes
17. Able to bypass the fix on DOM XSS at [www.adobe.com]Cross-site Scripting (XSS) - DOM
    12 votes
18. Adobe XSSCross-site Scripting (XSS) - Generic
    8 votes
19. API Key reported in #1465145 not rotated and thus is still valid and can be used by anyoneCleartext Storage of Sensitive Information
    7 votes
20. DoS of https://research.adobe.com/ via CVE-2018-6389 exploitationUncontrolled Resource Consumption
    6 votes
21. Reflected XSS via. searchCross-site Scripting (XSS) - Generic
    6 votes
22. Reflected Cross Site Scripting - 'puser' Parameter in login pageCross-site Scripting (XSS) - Generic
    5 votes
23. Open redirect and reflected xss in http://youthvoices.adobe.com/community?return_url=[payload her]Cross-site Scripting (XSS) - Generic
    4 votes
24. files.acrobat.com stored XSS via send fileCross-site Scripting (XSS) - Generic
    4 votes