CVE-2025-46978

CVE-2025-46978 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. The underlying issue allows a low-privileged attacker, with some user interaction, to inject malicious JavaScript that runs in a victim’s browser w...

CVE-2025-47073

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser. The issue is described across multiple sources...

CVE-2025-46942

CVE-2025-46942 concerns Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript, which would execute in a victim’s browser when visiting a page containing the tain...

CVE-2025-46976

CVE-2025-46976 affects Adobe Experience Manager (AEM) up to version 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject script, which executes in a victim’s browser when visiting a page containing the field. Adobe and related advisori...

CVE-2025-47092

Summary of CVE-2025-47092 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vuln...

CVE-2025-47057

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored XSS vulnerability (CVE-2025-47057). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2025-47114 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-47017 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46887 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46895 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46850

CVE-2025-46850 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when visiting the page containing the field. Adobe-aware advisories (APSB25-48) indicate ...

CVE-2025-46939 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-47036

CVE-2025-47036 affects Adobe Experience Manager 6.5.22 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, which could allow a low-privileged attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the affected page....

CVE-2025-46841 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46919 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-47012

CVE-2025-47012 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which execute in victims’ browsers when accessing the vulnerable page. The issue is documented across multiple feeds; the core des...

CVE-2025-46913

CVE-2025-46913 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS in vulnerable form fields. The root cause is stored cross-site scripting allowing high-privilege attackers to inject JavaScript that executes in victims’ browsers when visiting affected pages. Imp...

CVE-2025-46909

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability that lets a low‑privileged attacker inject malicious JavaScript into vulnerable form fields, executable in a victim’s browser when loading the page. Remediation per APSB25-48: up...

CVE-2025-46927 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46952 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...