CVE-2025-64598

CVE-2025-64598 affects Adobe Experience Manager (AEM) 6.5.23 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious scripts and have them execute in a victim’s browser when visiting a page contain...

CVE-2025-64790

CVE-2025-64790 affects Adobe Experience Manager (AEM) 6.5.23 and earlier with a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject JavaScript that can execute in a victim’s browser when visiting the page containing the vulnerable field. The CVS...

CVE-2025-64804

CVE-2025-64804 affects Adobe Experience Manager (AEM) 6.5.23 and earlier and is a stored Cross‑Site Scripting (XSS) vulnerability. The issue allows a low privileged attacker to inject malicious scripts into vulnerable form fields; malicious JavaScript can execute in a victim’s browser when visiti...

CVE-2025-64863

CVE-2025-64863 concerns Adobe Experience Manager (AEM) 6.5.23 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts, which execute in a victim’s browser when visiting the affected page....

CVE-2025-64873

CVE-2025-64873 affects Adobe Experience Manager 6.5.23 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which execute in the victim’s browser when visiting pages containing the affected field. Remediation: update to a version later t...

CVE-2026-27235

CVE-2026-27235: Adobe Experience Manager 6.5.23 and earlier are affected by a stored XSS vulnerability in form field processing. The root cause is insufficient input sanitization/escaping, allowing a low-privilege attacker to inject malicious JavaScript that executes in a victim’s browser when vi...

CVE-2025-64539

CVE-2025-64539 affects Adobe Experience Manager 6.5.23 and earlier. It describes a DOM-based Cross-Site Scripting (XSS) vulnerability in AEM’s web context that could lead to arbitrary code execution. Exploitation requires user interaction (visiting a crafted page), and successful abuse can enable...

CVE-2025-64546

CVE-2025-64546 affects Adobe Experience Manager 6.5.23 and earlier and is a stored XSS (CWE-79) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields; malicious JavaScript can execute in a victim’s browser when visiting a page containing the v...

CVE-2025-64548

Adobe Experience Manager (AEM) prior to 6.5.24 is affected by a stored XSS in vulnerable form fields (CVE-2025-64548). A low-privilege attacker can inject malicious scripts, with execution in the victim’s browser when visiting the page containing the field. The issue is documented across NVD/Red ...

CVE-2025-64557

CVE-2025-64557 is a stored XSS in Adobe Experience Manager (AEM) versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, and the payload may be executed in a victim’s browser when visiting the page containing the vulnerable field. The findi...

CVE-2025-64578

CVE-2025-64578 affects Adobe Experience Manager 6.5.23 and earlier and is described as a stored XSS in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which are executed in the victim’s browser when visiting the page containing the field. The CVSSv3.1 base score is ...

CVE-2025-64581

Adobe Experience Manager CVE-2025-64581 is a stored XSS vulnerability affecting AEM 6.5.23 and earlier, where low-privilege attackers can inject malicious scripts into vulnerable form fields. The attack can execute JavaScript in a victim’s browser when visiting pages containing the vulnerable fie...

CVE-2025-64594

CVE-2025-64594 affects Adobe Experience Manager 6.5.23 and earlier with a stored XSS in form fields. A low-privilege attacker could inject malicious scripts, which execute in a victim’s browser when visiting the vulnerable page. Remediation: update to a version later than 6.5.23 (per APSB25-115/N...

CVE-2025-64597

CVE-2025-64597 affects Adobe Experience Manager 6.5.23 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject JavaScript that executes in a victim’s browser when visiting a page containing the field. The issue is confirmed across multiple sources (NVD/ Red ...

CVE-2025-64603

CVE-2025-64603 affects Adobe Experience Manager 6.5.23 and earlier. It is a stored XSS (CWE-79) in vulnerable form fields that can be abused by a low-privileged attacker to inject malicious scripts, with JavaScript executing in a victim’s browser when visiting the page containing the field. Remed...

CVE-2025-64616

Adobe Experience Manager (AEM) 6.5.23 and earlier is affected by a stored XSS (CWE-79) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject JavaScript that can execute in an unprivileged user’s browser when visiting the page containing the vulnerable field....

CVE-2025-64799

Adobe Experience Manager (AEM) 6.5.23 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject JavaScript, which may execute in a victim’s browser when visiting the page containing the vulnerable field. Remediatio...

CVE-2025-64820

Adobe Experience Manager (AEM) prior to 6.5.23 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker with low privileges can inject malicious scripts, which execute in a user’s browser when visiting a page containing the vulnerable field. Several ...

CVE-2025-64827

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-64827). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executed in a victim’s br...

CVE-2025-64875

CVE-2025-64875 concerns Adobe Experience Manager (AEM) 6.5.23 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when visiting the affected...

CVE-2026-27251

Adobe Experience Manager (AEM) 6.5.x is affected by a stored XSS in form fields due to insufficient input sanitization. Versions 6.5.23 and earlier are vulnerable; an attacker with low privileges and suitable access could inject JavaScript that runs in users’ browsers when they visit pages contai...

CVE-2026-27257

Adobe Experience Manager 6.5.23 and earlier is affected by a stored XSS vulnerability in form input that can be exploited by a low-privilege attacker to inject JavaScript into pages containing vulnerable fields. Exploitation could cause the injected script to run in a victim’s browser when viewin...

CVE-2026-27265

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in form fields. The underlying issue is insufficient input sanitization/output escaping, allowing a low‑privileged attacker to inject malicious JavaScript that may execute in a vict...

CVE-2025-46962

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored cross-site scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the affecte...

CVE-2025-64558

CVE-2025-64558 is a stored XSS vulnerability affecting Adobe Experience Manager 6.5.23 and earlier. The issue allows a low-privilege attacker to inject malicious scripts into vulnerable form fields, which may execute in a victim’s browser when visiting the page containing the field. Affected prod...

CVE-2025-64562

Summary of CVE-2025-64562 (Adobe Experience Manager) : The issue affects AEM 6.5.23 and earlier and is a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privilege attacker can exploit it with user interaction (e.g., visiting a crafted URL or interacting with a manipulated page)...

CVE-2025-64583

Adobe Experience Manager 6.5.23 and earlier is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that could allow a low-privileged attacker to run malicious scripts in a victim’s browser after user interaction. The issue is gated by user interaction (e.g., visiting a craft...

CVE-2025-64601

CVE-2025-64601 : Adobe Experience Manager (AEM) 6.5.23 and earlier is affected by a stored cross-site scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which execute in a victim’s browser when visiting the affected page. Connected doc...

CVE-2025-64802

CVE-2025-64802 affects Adobe Experience Manager 6.5.23 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which are executed in a victim’s browser upon visiting the affected page. Connected sources corroborate the stored XSS vector a...

CVE-2025-64821

CVE-2025-64821 affects Adobe Experience Manager (AEM) 6.5.23 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, where a low-privilege attacker can inject malicious JavaScript that executes in a victim’s browser when visiting a page containing th...

CVE-2025-64857

CVE-2025-64857 is an XSS vulnerability in Adobe Experience Manager (AEM) prior to 6.5.23. The issue is described as a stored Cross-Site Scripting flaw that a low-privileged attacker could abuse to inject malicious scripts into vulnerable form fields, with JavaScript executed in victims’ browsers ...

CVE-2026-27228

CVE-2026-27228 : Adobe Experience Manager (AEM) versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in form field input that can be exploited by a low-privileged attacker to inject JavaScript executed in a victim’s browser. Multiple sources confirm the vu...

CVE-2026-27253

Summary : Adobe Experience Manager (AEM) 6.5.23 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in form field input. The issue arises from insufficient input sanitization/output encoding, allowing a low-privileged attacker to inject malicious JavaScript that may execu...

CVE-2026-47973

Technical details about CVE-2026-47973 are not publicly provided in the supplied documents; monitor for updates from Adobe and NVD for affected versions and remediation.

CVE-2025-64551

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a DOM-based XSS (CVE-2025-64551) that could allow a low-privileged attacker to execute malicious scripts in a victim’s browser. Exploitation requires user interaction (e.g., visiting a crafted URL). Multiple connected sources (NVD/...

CVE-2025-64556

CVE-2025-64556 is an Adobe Experience Manager issue affecting versions 6.5.23 and earlier, described as a stored Cross-Site Scripting (XSS) vulnerability that could allow a low-privileged attacker to inject malicious scripts into vulnerable form fields. According to the NVD entry, malicious JavaS...

CVE-2025-64592

CVE-2025-64592 pertains to Adobe Experience Manager (AEM) up to version 6.5.23, affected by a stored Cross‑Site Scripting (XSS) vulnerability that allows a low‑privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when ...

CVE-2025-64599

CVE-2025-64599 affects Adobe Experience Manager (AEM) 6.5.23 and earlier. The issue is a stored XSS in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that executes in a victim’s browser when visiting a page with the compromised field. According to Adobe PSIRT data...

CVE-2025-64611

CVE-2025-64611 affects Adobe Experience Manager 6.5.23 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows low-privilege attackers to inject malicious JavaScript that may run in a victim’s browser upon visiting a page containin...

CVE-2025-64612

CVE-2025-64612 describes a stored XSS vulnerability in Adobe Experience Manager, affecting version 6.5.23 and earlier. A low-privilege attacker can inject malicious scripts into vulnerable form fields, with victims executing the script when visiting a page containing the field. Connected sources ...

CVE-2025-64614

Summary of CVE-2025-64614 and related disclosures : Adobe Experience Manager (AEM) versions 6.5.23 and earlier are affected by a stored cross-site scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious JavaScript into these fields, which may be exec...

CVE-2025-64619

Adobe Experience Manager (AEM)

CVE-2025-64627

CVE-2025-64627 affects Adobe Experience Manager (AEM) 6.5.23 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page. Co...

CVE-2025-64789

Adobe Experience Manager (AEM) versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting the page containing the field. ...

CVE-2025-64793

Adobe Experience Manager (AEM) versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when visiting the affected page. Remediation: a...

CVE-2025-64796

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability (CVE-2025-64796). A low‑privileged attacker can inject malicious scripts into vulnerable form fields, with JavaScript that is executed in a victim’s browser when visiting the page c...

CVE-2025-64822

CVE-2025-64822 affects Adobe Experience Manager 6.5.23 and earlier and is a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in the victim’s browser when visiting a page containing the vulnerable field. Connected adv...

CVE-2025-64858

CVE-2025-64858 affects Adobe Experience Manager 6.5.23 and earlier with a stored XSS in vulnerable form fields. Low-privilege attacker can inject malicious scripts; victim’s browser executes them on visiting the affected page. Impact per provided metrics is low confidentiality/integrity, no avail...

CVE-2026-27229

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored XSS vulnerability in how form field input is sanitized. An attacker could inject malicious JavaScript that executes in a victim’s browser when visiting pages containing the vulnerable field. Affected versions: 6.5.x before...

CVE-2026-27248

Adobe Experience Manager (AEM) 6.5.23 and earlier are affected by a stored XSS in form field input. The vulnerability stems from insufficient input sanitization/output encoding, allowing low-privileged attackers to inject JavaScript that executes in a victim’s browser when visiting pages containi...