CVE-2024-36176

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields, enabling malicious JavaScript execution in a victim’s browser when visiting pages containing those fields. Root cause: DOM/Stored XSS in user-supplied input. Affected product: AEM 6.5...

CVE-2024-36198

Adobe Experience Manager (AEM) version 6.5.20 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. The root cause is untrusted input being stored and later rendered, enabling attacker-supplied JavaScript to execute in a victim’s browser. Public references in multiple f...

CVE-2024-41848

CVE-2024-41848 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, exposing a reflected XSS vulnerability invoked when a user visits a crafted URL reference. The issue is characterized as a reflected Cross-Site Scripting (XSS) in AEM, with the CVSS 3.1 vector indicating Network access, low...

CVE-2024-41877

CVE-2024-41877 affects Adobe Experience Manager (AEM) 6.5.19 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing malicious JavaScript to run in a victim’s browser when the page with the field is loaded. The issue is confirmed across multi...

CVE-2024-43745

CVE-2024-43745 is a reflected Cross‑Site Scripting (XSS) vulnerability affecting Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue allows an attacker to persuade a user to visit a crafted URL, potentially causing malicious JavaScript to execute in the victim’s browser. Connected source...

CVE-2024-43750

CVE-2024-43750 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields, enabling attacker-injected JavaScript to run in a victim’s browser. Affected products and details: AEM 6.5.x (6.5.21 and earlier) with stored XSS in form fields. Root caus...

CVE-2024-52825

Adobe Experience Manager (AEM) 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling malicious JavaScript to run in a viewer’s browser when accessing those fields. Affected component/issue: stored XSS in AEM forms/fields (CVE-2024-...

CVE-2024-52832

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows attacker-supplied JavaScript to be executed in a victim’s browser when visiting pages containing those fields. CVE-2024-52832 is...

CVE-2024-52835

CVE-2024-52835 affects Adobe Experience Manager up to version 6.5.21 (and earlier). It is a stored Cross-Site Scripting (XSS) vulnerability where attacker-supplied input in vulnerable form fields can inject JavaScript executed in a victim’s browser. The CVE is documented with a CVSS v3.1 base sco...

CVE-2024-52845

Adobe Experience Manager (AEM) with versions 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-52845). The issue arises in vulnerable form fields where attacker-supplied input stored on the server can inject malicious JavaScript, which is executed in a ...

CVE-2025-46895

CVE-2025-46895 : Adobe Experience Manager (AEM) 6.5.22 and earlier contains a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which are executed in a victim’s browser when visiting the affected page. The linked d...

CVE-2025-46908

CVE-2025-46908 affects Adobe Experience Manager 6.5.22 and earlier. The issue is a stored XSS in vulnerable form fields, exploitable by a low-privileged attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the affected page. The CVE is documented with a stored XSS...

CVE-2025-46945

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-46945). The issue arises in vulnerable form fields where a low-privilege attacker can inject malicious JavaScript, which may execute in a victim’s browser when they load a ...

CVE-2025-46953

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-46953). Low-privilege attackers could inject malicious scripts into vulnerable form fields, leading to JavaScript execution in victims’ browsers when visiting the affected...

CVE-2025-46967

Summary: CVE-2025-46967 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. Vulnerability: stored Cross-Site Scripting (XSS) in vulnerable form fields allows a low-privileged attacker to inject JavaScript, which executes in a victim’s browser when visiting the affected page. Impact (as sta...

CVE-2025-46981

CVE-2025-46981 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can be exploited by a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visitin...

CVE-2025-46990

Adobe Experience Manager 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker with user interaction could inject malicious JavaScript that executes in a victim’s browser. The issue is documented across multiple feeds (CVE-2025-46990) wit...

CVE-2025-47013

CVE-2025-47013 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier, affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser w...

CVE-2025-47038

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which executes in a victim’s browser when visiting the affected page. Remediati...

CVE-2025-47039

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript and have it execute in a victim’s browser when visiting the page containing the field. A...

CVE-2025-47067

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-47067) that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, causing JavaScript execution in a victim’s brow...

CVE-2025-47071

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored cross-site scripting (XSS) vulnerability in vulnerable form fields. Root cause: improper input handling allows injected JavaScript to execute in a victim’s browser when loading the page containing the vulnerable field. Impa...

CVE-2025-47082

CVE-2025-47082 covers a stored XSS flaw in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The vulnerability affects vulnerable form fields where untrusted input can be stored and later reflected, allowing a low-privilege attacker to inject JavaScript that executes in victims’ browser...

CVE-2024-43732

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue arises when untrusted data is used to update the DOM via client‑side scripts, potentially allowing arbitrary code execution in the victim’s browser after user interact...

CVE-2024-43736

CVE-2024-43736 is a stored XSS flaw affecting Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability allows injected JavaScript in vulnerable form fields, executing in a victim’s browser when the page is loaded. The connected advisory APSB24-69 confirms AEM updates are available to ...

CVE-2024-43739

CVE-2024-43739 affects Adobe Experience Manager up to version 6.5.21. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling attacker-controlled JavaScript to run in a victim’s browser when visiting a page containing the affected field. Connected sources confi...

CVE-2024-43749

CVE-2024-43749 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The vulnerability is a stored cross-site scripting (XSS) flaw in vulnerable form fields, allowing an attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting the affected page. P...

CVE-2024-52824

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could be injected by an attacker and executed in a victim’s browser when they visit a page containing the vulnerable field. ...

CVE-2024-52859

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to execute in a victim’s browser when visiting the affected page. The public details identify the affected componen...

CVE-2025-46872

Adobe Experience Manager (AEM) 6.5.22 and earlier versions contain a stored Cross‑Site Scripting (XSS) flaw in vulnerable form fields. According to multiple sources, an attacker with low privileges can inject malicious scripts, which may execute in a victim’s browser when visiting the affected pa...

CVE-2025-46878

CVE-2025-46878 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when they load the affected page. Exploitation requires user interaction (v...

CVE-2025-46880

CVE-2025-46880 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when visiting the affec...

CVE-2025-46888

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker to inject malicious JavaScript, which would execute in a victim’s browser when visiting a page contain...

CVE-2025-46934

CVE-2025-46934 affects Adobe Experience Manager versions 6.5.22 and earlier. The issue is a stored XSS in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript which runs in a victim’s browser when visiting the affected page. Exploitation details and impact are...

CVE-2025-46940

Adobe Experience Manager CVE-2025-46940 affects AEM 6.5.22 and earlier with a stored XSS flaw in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when they visit a page containing the field. The CVSSv3.1 base score is 5.4 (M...

CVE-2025-46974

Adobe Experience Manager vulnerability CVE-2025-46974 affects AEM 6.5.22 and earlier with a stored XSS issue in vulnerable form fields. The root cause is stored JavaScript that can be injected by a low-privileged attacker and executed in a victim’s browser when visiting a page containing the vuln...

CVE-2025-46986

CVE-2025-46986 affects Adobe Experience Manager (AEM) 6.5.22 and earlier with a stored XSS in vulnerable form fields. The vulnerability allows a low-privileged attacker, via a page containing the vulnerable field, to inject and execute malicious JavaScript in a victim’s browser. CVSS 3.1 base sco...

CVE-2025-46988

CVE-2025-46988 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting a page containing the v...

CVE-2025-47048

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may execute in a victim’s browser when visiting a page containing the vulnerable fi...

CVE-2025-47074

Context: CVE-2025-47074 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. Details from connected sources confirm a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, leading to execut...

CVE-2024-36155

CVE-2024-36155 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser. The NVD entry reports a MEDIUM severity (CVSS 3.1: 5.4...

CVE-2024-43726

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when they visit a page containing the vulnerable field. Connected documents corroborate th...

CVE-2024-52830

Adobe Experience Manager CVE-2024-52830 describes a stored XSS in AEM 6.5.21 and earlier, where malicious scripts can be injected into vulnerable form fields and executed when a user visits the affected page. The CVSS 3.1 base score is 5.4 (Medium) with network attack vector, low access/privilege...

CVE-2025-46851

Adobe Experience Manager (AEM) 6.5.22 and earlier versions are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts that could execute in a victim’s browser when visiting pages containing th...

CVE-2025-46865

CVE-2025-46865 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerable field. The i...

CVE-2025-46866

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which may execute in a victim’s browser when they visit the affected page and interact with the...

CVE-2025-46873

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue could let a low-privileged attacker inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containin...

CVE-2025-46884

CVE-2025-46884 affects Adobe Experience Manager (AEM) 6.5.22 and earlier with a stored XSS in vulnerable form fields. High-privilege attackers can inject JavaScript, possibly executing it in victims’ browsers when visiting the affected page. The vulnerability is documented across multiple sources...

CVE-2025-46886

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow a low-privileged attacker to inject malicious scripts that run in a victim’s browser after visiting a page with the vulnerable fie...

CVE-2025-46913

CVE-2025-46913 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS in vulnerable form fields. The root cause is stored cross-site scripting allowing high-privilege attackers to inject JavaScript that executes in victims’ browsers when visiting affected pages. Imp...