CVE-2026-75744 Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)

🗓️ 22 Sep 2026 18:56:01Reported by adobeType

High-privileged attacker Stored XSS in Adobe Experience Manager Forms JEE via form fields.

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Adobe Experience Manager Forms JEE <= 6.5.25 / 6.5 LTS SP2 Multiple Vulnerabilities (APSB26-151)	25 Sep 202600:00	–	nessus
BDU FSTEC	The vulnerability of the corporate platform for creating, managing, and processing Adobe Experience Manager (AEM) Forms on JEE lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.	2 Oct 202600:00	–	bdu_fstec
Circl	CVE-2026-75744	23 Sep 202601:19	–	circl
CVE	CVE-2026-75744	22 Sep 202618:56	–	cve
EUVD	EUVD-2026-84790	22 Sep 202618:56	–	euvd
NCSC	vulnerabilities in Adobe Experience Manager Forms JEE	23 Sep 202613:28	–	ncsc
NVD	CVE-2026-75744	22 Sep 202619:16	–	nvd
Positive Technologies	PT-2026-96990	22 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-75744: Improper Neutralization of Input During Web Page Generation	22 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-75744 Adobe Experience Manager Forms JEE \| Cross-site Scripting (Stored XSS) (CWE-79)	22 Sep 202618:56	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "product": "AEM 6.5 Forms JEE",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "6.5.25",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.5.25 (AEMForms-6.5.0-0134 Hotfix)",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AEM 6.5 LTS Forms JEE",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "6.5 LTS SP2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.5 LTS SP3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/aem-forms/apsb26-151.html

22 Sep 2026 18:56Current

CVSS 3.18.1

EPSS0.01175

SSVC

CWE-79