CVE-2025-46900

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a pa...

CVE-2025-47082 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-47082

CVE-2025-47082 covers a stored XSS flaw in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The vulnerability affects vulnerable form fields where untrusted input can be stored and later reflected, allowing a low-privilege attacker to inject JavaScript that executes in victims’ browser...

CVE-2025-46899 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46899

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. A low‑privileged attacker, with user interaction, can inject malicious JavaScript executed in a victim’s browser when visiting the vulnerable page. remediation:...

CVE-2025-47020

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts, which may be executed in a victim’s browser when visiting the page contai...

CVE-2025-47005 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46948

Adobe Experience Manager 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when they visit a page containing the vuln...

CVE-2025-46948 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46876

CVE-2025-46876 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, leading to JavaScript execution in a victim’s browser when visiting a page containing the vulnerable fi...

CVE-2025-46931

CVE-2025-46931 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue is a stored cross-site scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that may execute in a victim’s browser when visiting the p...

CVE-2025-46945

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-46945). The issue arises in vulnerable form fields where a low-privilege attacker can inject malicious JavaScript, which may execute in a victim’s browser when they load a ...

CVE-2025-47022 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-47022

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing a low-privilege attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the page containing the field. The issue is document...

CVE-2025-47022 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46904

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields due to lack of proper filtering/escaping. The issue could allow a low-privileged attacker to inject malicious JavaScript, which may be executed in...

CVE-2025-46904 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46904 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-46860

CVE-2025-46860 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker with user interaction to inject malicious JavaScript, which is executed in a victim’s browser when vis...

CVE-2025-47048 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...