CVE-2025-46886

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow a low-privileged attacker to inject malicious scripts that run in a victim’s browser after visiting a page with the vulnerable fie...

CVE-2025-46920

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored XSS in vulnerable form fields. A low-privileged attacker with user interaction can inject JavaScript executed in a victim’s browser. Remediation: apply the referenced security updates and upgrade to a patched 6.5.23+ versi...

CVE-2025-46930

CVE-2025-46930 affects Adobe Experience Manager (AEM) 6.5.22 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts executed in a victim’s browser. Public sources consistently describe th...

CVE-2025-46934

CVE-2025-46934 affects Adobe Experience Manager versions 6.5.22 and earlier. The issue is a stored XSS in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript which runs in a victim’s browser when visiting the affected page. Exploitation details and impact are...

CVE-2025-46940

Adobe Experience Manager CVE-2025-46940 affects AEM 6.5.22 and earlier with a stored XSS flaw in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when they visit a page containing the field. The CVSSv3.1 base score is 5.4 (M...

CVE-2025-46973

Adobe Experience Manager (AEM) 6.5.22 and earlier has a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-46973). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s browser when visiting the ...

CVE-2025-46974

Adobe Experience Manager vulnerability CVE-2025-46974 affects AEM 6.5.22 and earlier with a stored XSS issue in vulnerable form fields. The root cause is stored JavaScript that can be injected by a low-privileged attacker and executed in a victim’s browser when visiting a page containing the vuln...

CVE-2025-46988

CVE-2025-46988 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting a page containing the v...

CVE-2025-46992

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which execute in a victim’s browser when they access the affected page. Remediation: update to a ve...

CVE-2025-47006

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by CVE-2025-47006, a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject JavaScript that executes in a victim’s browser when they visit a page containing the vulnerable field. Multiple conn...

CVE-2025-47012

CVE-2025-47012 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which execute in victims’ browsers when accessing the vulnerable page. The issue is documented across multiple feeds; the core des...

CVE-2025-47048

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may execute in a victim’s browser when visiting a page containing the vulnerable fi...

CVE-2025-47069

CVE-2025-47069 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject scripts, which may execute in a victim’s browser when visiting the affected page. The provided metrics indicate a CVSS v3.1 base score ...

CVE-2024-36185

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript, which would execute in a victim’s browser upon visiting the page containing the vulnerable field. The CVSS 3...

CVE-2024-36189

CVE-2024-36189 affects Adobe Experience Manager 6.5.20 and earlier with a stored XSS in vulnerable form fields. Exploitation can cause malicious JavaScript to run in a victim’s browser when visiting pages containing the field. The issue is acknowledged in public advisories and a remediation updat...

CVE-2024-43725

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-injected JavaScript to run in a victim’s browser when visiting the affected page. The CVE is CVE-2024-43725. Available public d...

CVE-2024-52830

Adobe Experience Manager CVE-2024-52830 describes a stored XSS in AEM 6.5.21 and earlier, where malicious scripts can be injected into vulnerable form fields and executed when a user visits the affected page. The CVSS 3.1 base score is 5.4 (Medium) with network attack vector, low access/privilege...

CVE-2025-46851

Adobe Experience Manager (AEM) 6.5.22 and earlier versions are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts that could execute in a victim’s browser when visiting pages containing th...

CVE-2025-46864

CVE-2025-46864 affects Adobe Experience Manager, version 6.5.22 and earlier, due to a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, with victims executing them when visiting the affected page; user interaction is required and the impact...

CVE-2025-46865

CVE-2025-46865 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerable field. The i...

CVE-2025-46873

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue could let a low-privileged attacker inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containin...

CVE-2025-46875

CVE-2025-46875 applies to Adobe Experience Manager 6.5.22 and earlier, with a reflected XSS flaw. A low-privilege attacker convincing a victim to visit a vulnerable URL can cause malicious JavaScript to run in the victim’s browser. The connected advisories/feeds confirm the issue and recommend up...

CVE-2025-46876

CVE-2025-46876 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, leading to JavaScript execution in a victim’s browser when visiting a page containing the vulnerable fi...

CVE-2025-46914

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The flaw allows a low-privileged attacker to inject malicious JavaScript, which may execute when a victim visits the affected page. The CVE-2025-...

CVE-2025-46927

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious scripts, which may be executed in a victim’s browser when visiting the page with the vulnerable field; exploitation ...

CVE-2025-46931

CVE-2025-46931 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue is a stored cross-site scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that may execute in a victim’s browser when visiting the p...

CVE-2025-46935

CVE-2025-46935 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which may execute in a victim’s browser when visiting pages containin...

CVE-2025-46960

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability (CVE-2025-46960). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with JavaScript potentially executing in a victim’s browser when visiting the page containin...

CVE-2025-46975

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in the victim’s browser when visiting pages containing the vulnerable field. Th...

CVE-2025-46977

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when visiting the page. The issue is documented as CVE-202...

CVE-2025-47000

CVE-2025-47000 affects Adobe Experience Manager up to version 6.5.22 (and earlier). The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that allows a low-privileged attacker to inject malicious JavaScript, which is executed in a victim’s browser when visiting ...

CVE-2025-47005

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability (CVE-2025-47005). The issue allows a low‑privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s browser when visitin...

CVE-2025-47020

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts, which may be executed in a victim’s browser when visiting the page contai...

CVE-2025-47050

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can be exploited by a low-privileged attacker to inject malicious JavaScript, executed in a victim’s browser when visiting the affected page. The issue...

CVE-2024-43744

CVE-2024-43744 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. It is a stored cross-site scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to execute in a victim’s browser when visiting the page containing the field. According to the provided data, ...

CVE-2024-52828

CVE-2024-52828 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript that runs in a victim’s browser when visiting a page containing the affected field. The availab...

CVE-2024-52851

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The CVE entry for CVE-2024-52851 specifies that malicious JavaScript could execute in a victim’s browser when the page containing the vulnerable ...

CVE-2025-46843

CVE-2025-46843 affects Adobe Experience Manager versions 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privilege attacker could inject malicious scripts, which execute in a victim’s browser when visiting a page containing the field. The connected advisory APSB25-48 notes u...

CVE-2025-46846

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that can execute in a victim’s browser when visiting the affected page. Underlying cause is...

CVE-2025-46855

CVE-2025-46855 affects Adobe Experience Manager versions 6.5.22 and earlier, where a stored XSS vulnerability in vulnerable form fields could allow a low-privileged attacker to inject malicious JavaScript that executes in victims’ browsers. The issue is documented with a MEDIUM base score (CVSS 3...

CVE-2025-46863

Adobe Experience Manager (AEM) vulnerability CVE-2025-46863 is a stored XSS affecting AEM versions 6.5.22 and earlier. The issue is triggered when an attacker with low privileges injects malicious JavaScript into vulnerable form fields, which executes in a victim’s browser when the page is loaded...

CVE-2025-46870

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. The CVE-2025-46870 entry describes that a low-privileged attacker can inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing...

CVE-2025-46890

CVE-2025-46890 : Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, with JavaScript potentially executing in a victim’s browser when visiting the affected page. Remediation p...

CVE-2025-46905

CVE-2025-46905 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. The root cause is improper handling that allows a low-privileged attacker to inject malicious JavaScript, which executes in a victim’s browser when visiting the affected page. Public d...

CVE-2025-46919

CVE-2025-46919 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue is stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing a low-privilege attacker to inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. The cited advi...

CVE-2025-46923

CVE-2025-46923 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. A stored XSS vulnerability exists in vulnerable form fields that can be exploited by a low-privileged attacker, potentially causing malicious JavaScript to execute in a victim’s browser when visiting a page contain...

CVE-2025-46948

Adobe Experience Manager 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when they visit a page containing the vuln...

CVE-2025-46952

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The root cause is stored XSS that allows a low-privileged attacker to inject malicious scripts, which can execute in a victim’s browser when visi...

CVE-2025-46966

Adobe Experience Manager (AEM) prior to 6.5.23 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (AEM 6.5.22 and earlier). The issue allows a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when they visit a page ...

CVE-2025-46968

Adobe Experience Manager (AEM) prior to 6.5.23 (6.5.22 and earlier) is affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields that could enable a low‑privilege attacker to inject malicious JavaScript, executed in a victim’s browser when visiting the page containin...