PT-2019-6011

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 Description The issue is related to a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. The vulnerability is associated...

CVE-2018-19724

CVE-2018-19724 affects Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 with a stored cross-site scripting (XSS) vulnerability that could disclose sensitive information. Root cause is stored XSS in forms handling; impact is information disclosure. Remediation: apply Adobe APSB19-03 securi...

CVE-2018-19724: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

PT-2019-9893

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 Description The issue is a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. Recommendations For Adobe Experience Manager...

APSB19-03 Security updates available for Adobe Experience Manager Forms

Adobe has released security updates for Adobe Experience Manager Forms. These updates resolve a stored cross-site scripting vulnerability rated Important that could result in sensitive information disclosure...

CVE-2017-3067

Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms...

CVE-2017-3067

Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms...

CVE-2017-3067

CVE-2017-3067 affects Adobe Experience Manager Forms (AEM Forms) versions 6.0–6.2, with an information disclosure vulnerability caused by abuse of the pre-population service. Exploitation could disclose sensitive information via the pre-population mechanism. Adobe released APSB17-16 security upda...

PT-2017-15635

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms versions 6.0 through 6.2 Description The issue is related to an information disclosure vulnerability resulting from the abuse of the pre-population service in AEM Forms. Recommendations For Adobe Experience Manag...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Experience Manager Forms. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Adobe Security...

CVE-2017-3067: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms...

Cross site scripting

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks...

CVE-2016-6933

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks...

CVE-2016-6933: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks...

PT-2016-7176

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms versions 6.2 and earlier LiveCycle versions 11.0.1 LiveCycle version 10.0.4 Description The issue is related to an input validation problem in the AACComponent, which could be exploited for cross-site scripting...

PT-2016-7177

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms versions 6.2 and earlier LiveCycle versions 11.0.1 LiveCycle version 10.0.4 Description The issue is related to an input validation problem in the PMAdmin module, which could be exploited for cross-site scripting...

CVE-2016-6934: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be used in cross-site scripting attacks...

APSB16-40 Security updates available for Adobe Experience Manager Forms (LiveCycle)

Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve two important input validation issues that could be used in cross-site scripting attacks CVE-2016-6933 and CVE-2016-6934. Adobe recommends users apply the available...