CVE-2025-46890

CVE-2025-46890 : Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, with JavaScript potentially executing in a victim’s browser when visiting the affected page. Remediation p...

CVE-2025-46905

CVE-2025-46905 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. The root cause is improper handling that allows a low-privileged attacker to inject malicious JavaScript, which executes in a victim’s browser when visiting the affected page. Public d...

CVE-2025-46924

CVE-2025-46924 is an Adobe Experience Manager (AEM) stored XSS in vulnerable form fields. Affected: AEM 6.5.22 and earlier. Exploitation requires low privileges and user interaction, allowing malicious JavaScript to execute in victims’ browsers when visiting pages with the vulnerable field. CVSSv...

CVE-2025-46952

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The root cause is stored XSS that allows a low-privileged attacker to inject malicious scripts, which can execute in a victim’s browser when visi...

CVE-2025-46956

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields (CVE-2025-46956). A low-privilege attacker can cause malicious JavaScript to execute in a victim’s browser when visiting the page containing the vulnerable field. The issue is describe...

CVE-2025-46960

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability (CVE-2025-46960). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with JavaScript potentially executing in a victim’s browser when visiting the page containin...

CVE-2025-46966

Adobe Experience Manager (AEM) prior to 6.5.23 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (AEM 6.5.22 and earlier). The issue allows a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when they visit a page ...

CVE-2025-46983

CVE-2025-46983 – Adobe Experience Manager is affected in versions 6.5.22 and earlier by a stored cross-site scripting (XSS) vulnerability. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, potentially executing JavaScript in a victim’s browser whe...

CVE-2025-47019

Adobe Experience Manager (AEM) is affected by CVE-2025-47019: a stored XSS vulnerability in 6.5.22 and earlier. The issue allows a low-privileged attacker, with user interaction, to inject malicious scripts into vulnerable form fields, resulting in JavaScript execution in the victim’s browser whe...

CVE-2025-47020

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts, which may be executed in a victim’s browser when visiting the page contai...

CVE-2025-47025

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which execute in a victim’s browser when accessing the affected page. Remediation: apply the APS...

CVE-2025-47032

CVE-2025-47032 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. A stored XSS vulnerability allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing in a victim’s browser when visiting the affected page. Pub...

CVE-2025-47068

CVE-2025-47068 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page....

CVE-2025-47069

CVE-2025-47069 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject scripts, which may execute in a victim’s browser when visiting the affected page. The provided metrics indicate a CVSS v3.1 base score ...

CVE-2025-47079

CVE-2025-47079 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. A stored Cross-Site Scripting (XSS) flaw allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executing in a victim’s browser when loading the page containing t...

CVE-2025-64888

Adobe Experience Manager 6.5.23 and earlier are affected by a DOM-based XSS vulnerability (CVE-2025-64888) that could allow a low-privileged attacker to execute scripts in a victim’s browser. Exploitation requires user interaction (e.g., visiting a crafted URL or interacting with a manipulated pa...

CVE-2024-43720

CVE-2024-43720 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue is a DOM-based Cross‑Site Scripting (XSS) vulnerability in AEM that could allow an attacker to execute arbitrary code in the victim’s browser session. Exploitation requires user interaction (e.g., following a mali...

CVE-2025-46863

Adobe Experience Manager (AEM) vulnerability CVE-2025-46863 is a stored XSS affecting AEM versions 6.5.22 and earlier. The issue is triggered when an attacker with low privileges injects malicious JavaScript into vulnerable form fields, which executes in a victim’s browser when the page is loaded...

CVE-2025-46877

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can be executed in a victim’s browser when visiting the page containin...

CVE-2025-46910

Adobe Experience Manager CVE-2025-46910 describes a stored XSS in AEM versions 6.5.22 and earlier, enabling a low-privileged attacker to inject JavaScript into vulnerable form fields and have it execute in a victim’s browser when visiting the affected page. The vulnerability is documented across ...

CVE-2025-46912

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored XSS vulnerability (CVE-2025-46912) that low-privileged attackers can abuse to inject JavaScript into vulnerable form fields, potentially executing in victims’ browsers. Linked sources note additional XSS variants (reflecte...

CVE-2025-46923

CVE-2025-46923 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. A stored XSS vulnerability exists in vulnerable form fields that can be exploited by a low-privileged attacker, potentially causing malicious JavaScript to execute in a victim’s browser when visiting a page contain...

CVE-2025-46963

Adobe Experience Manager (AEM) prior to 6.5.23 (6.5.22 and earlier) is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The root cause is input handling that allows attackers with low privileges to inject and execute malicious JavaScript in victims’ browser...

CVE-2025-46976

CVE-2025-46976 affects Adobe Experience Manager (AEM) up to version 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject script, which executes in a victim’s browser when visiting a page containing the field. Adobe and related advisori...

CVE-2025-47002

CVE-2025-47002 is an XSS vulnerability affecting Adobe Experience Manager 6.5.22 and earlier. The stored XSS occurs in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page. The CVE is documented w...

CVE-2025-47031

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in form fields, allowing a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser when visiting the vulnerable page. The issue is documented as CVE...

CVE-2025-47035

Adobe Experience Manager (AEM) up to version 6.5.22 is affected by a stored Cross‑Site Scripting (XSS) vulnerability in form fields. The issue allows a low‑privileged attacker with user interaction to inject malicious scripts that execute in a victim’s browser when visiting pages containing the v...

CVE-2025-47047

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation requires low privileges, enabling an attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page....

CVE-2025-47051

CVE-2025-47051 affects Adobe Experience Manager (AEM) 6.5.22 and older, with a stored Cross-Site Scripting (XSS) vulnerability that could allow a low-privilege attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in a victim’s browser when loading a p...

CVE-2025-47085

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by CVE-2025-47085, a stored XSS vulnerability in vulnerable form fields that allows a low-privileged attacker to inject JavaScript executed in victims’ browsers when visiting the affected page. The CVE is part of a broader AEM vulnerab...

CVE-2025-47087

CVE-2025-47087 affects Adobe Experience Manager (AEM) prior to 6.5.23/6.5.22 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could be exploited by a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser w...

CVE-2025-46842

CVE-2025-46842 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.5.22 and earlier. The issue allows a low-privilege attacker to inject malicious script into vulnerable form fields; when a user visits a page containing the field, the JavaScript can execute in...

CVE-2025-46860

CVE-2025-46860 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker with user interaction to inject malicious JavaScript, which is executed in a victim’s browser when vis...

CVE-2025-46885

CVE-2025-46885 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the f...

CVE-2025-46892

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts, with malicious JavaScript potentially executing in a victim’s browser whe...

CVE-2025-46893

The CVE-2025-46893 entry concerns Adobe Experience Manager (AEM) 6.5.22 and earlier with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. The root cause is a stored XSS condition that allows a low-privileged attacker to inject malicious scripts, with malicious JavaScript execut...

CVE-2025-46918

CVE-2025-46918 affects Adobe Experience Manager up to 6.5.22, with a stored XSS vulnerability in vulnerable form fields (low-privilege attacker, requires user interaction). The provided documents indicate remediation via Adobe APSB25-48 updates, and Tenable/PT advisories reference AEM 6.5.23+ fix...

CVE-2025-46926

Summary: CVE-2025-46926 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The issue is a stored cross-site scripting (XSS) vulnerability in vulnerable form fields, exploitable by a low‑privileged attacker to inject malicious JavaScript that runs in a victim’s browser when the page is loa...

CVE-2025-46947

CVE-2025-46947 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. Low-privileged attackers can inject JavaScript that executes in a victim’s browser when visiting the affected page. Remediation: update to a fixed version (AEM 6.5.23 or newer) as advi...

CVE-2025-46955

CVE-2025-46955 affects Adobe Experience Manager (AEM) 6.5.22 and earlier, with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that can be exploited by a low-privileged attacker who entices a user to interact with the page, leading to malicious JavaScript execution in the victi...

CVE-2025-46957

CVE-2025-46957 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields, exploitable by low-privilege users to run malicious JavaScript in victims’ browsers (impact: user interaction; CVSSv3.1 5.4). AEM has advisory APSB25-48 reporting updates to address the...

CVE-2025-46965

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that is executed in a victim’s browser when visiting the page containing the vulnerable...

CVE-2025-46987

CVE-2025-46987 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. It describes a stored Cross-Site Scripting (XSS) vulnerability that could allow a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, potentially executing in a victim’s browser when...

CVE-2025-47011

Adobe Experience Manager (AEM) prior to version 6.5.23 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privilege attacker to inject malicious JavaScript that executes in a victim’s browser. The issue is documented against AEM 6.5.22 and e...

CVE-2025-47022

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing a low-privilege attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the page containing the field. The issue is document...

CVE-2025-47027

Adobe Experience Manager (AEM) is affected by CVE-2025-47027: a stored cross-site scripting (XSS) vulnerability in AEM form fields that can allow a low-privileged attacker to inject malicious scripts, with malicious JavaScript executed when users load the vulnerable page. Affected product/version...

CVE-2025-47034

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript that is executed in a victim’s browser when visiting the affected page. The CVE ...

CVE-2025-47072

CVE-2025-47072 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could be abused by a low-privileged attacker to inject malicious JavaScript, which may execute when a victim visits the ...

CVE-2025-64602

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored cross‑site scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker to inject malicious JavaScript, which can be executed in a victim’s browser when visiting the page containing t...

CVE-2023-51458

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored XSS in vulnerable form fields. The underlying issue is input being stored and reflected, allowing low-privileged attackers with user interaction to inject malicious scripts into pages, potentially executing in victims’ brow...