CVE-2025-46845

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, which could allow a low‑privilege attacker to inject malicious scripts and cause the attacker’s code to run in a victim’s browser when visiting a page containin...

CVE-2025-46922

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are vulnerable to a stored Cross-Site Scripting (XSS) issue in vulnerable form fields. The flaw allows a low-privileged attacker to inject malicious scripts, which can execute in a victim’s browser when they visit the affected page. Root ...

CVE-2025-46985

CVE-2025-46985 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker, with user interaction, can inject malicious JavaScript that executes in the victim’s browser. Remediat...

CVE-2025-47083

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page with the ...

CVE-2024-20779

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Root cause described in PT-2024-2857 as inadequate protection of the web page structure, allowing injected JavaScript to execute in a victim’s browser. AEM APSB24-21 pr...

CVE-2024-26078

Adobe Experience Manager (AEM) 6.5.20 and earlier contains a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied scripts to execute in a victim’s browser. The issue is explicitly tied to CVE-2024-26078 and is cited alongside related XSS CVEs in th...

CVE-2024-26123

CVE-2024-26123 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS vulnerability in form fields. The issue allows injected JavaScript to run in a victim’s browser when visiting vulnerable pages. CVSS 3.1 base score is 5.4 (Medium) with Network access, Low attack complexity...

CVE-2024-36149

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript that runs in a victim’s browser when loading a page with the affected field. The CVE entry is supported by NV...

CVE-2024-36163

Adobe Experience Manager (AEM)

CVE-2024-36164

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript, which is executed in a victim’s browser when visiting a page containing the vul...

CVE-2024-36187

Adobe Experience Manager (AEM) prior to version 6.5.21 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-injected JavaScript to run in the victim’s browser when visiting a page containing the field. Affected product/version: AEM 6.5.20 a...

CVE-2024-36224

CVE-2024-36224 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a DOM-based XSS vulnerability that can lead to arbitrary JavaScript execution in the victim’s browser, typically requiring user interaction. The NVD/NVD-provided metrics show CVSS v3.1 base score 5.4 (medium) with net...

CVE-2024-41847

Summary: CVE-2024-41847 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a reflected Cross-Site Scripting (XSS) vulnerability triggered when a user visits a vulnerable page URL. The underlying issue allows attacker-supplied JavaScript to run in the victim’s browser context. Accordi...

CVE-2024-43731

CVE-2024-43731 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with an Improper Authorization (CWE-285) vulnerability that could allow a low-privileged attacker to bypass security controls and impact integrity without user interaction. The issue is corroborated across multiple feeds (NV...

CVE-2024-43754

CVE-2024-43754 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue arises when data from a malicious source is processed by client-side scripts to update the DOM, potentially allowing arbitrary code execution in t...

CVE-2024-45153

CVE-2024-45153 : Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that may execute in a user’s browser when visiting the page containing the field. ...

CVE-2024-52847

CVE-2024-52847 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier and describes a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields that could cause malicious JavaScript to run in a victim’s browser when visiting the page. Connected advisories confirm multi...

CVE-2024-53962

CVE-2024-53962 is a stored Cross-Site Scripting flaw in Adobe Experience Manager (AEM) for versions 6.5.21 and earlier. The underlying issue is unvalidated input written into vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that can execute in a victim’s browser whe...

CVE-2024-53964

Adobe Experience Manager (AEM) prior to 6.5.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious scripts, which can execute in a victim’s browser when visiting pages containing the vulnerable f...

CVE-2025-46844

Adobe Experience Manager CVE-2025-46844 affects AEM 6.5.22 and earlier with a stored XSS in vulnerable form fields. Exploitation by a low-privileged user who can cause a victim’s browser to execute malicious JavaScript when visiting a page containing the vulnerable field is described in multiple ...

CVE-2025-46951

CVE-2025-46951 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when ...

CVE-2025-46971

CVE-2025-46971 describes a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.5.22 and earlier . The issue can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, with execution of JavaScript in victims’ browsers when...

CVE-2025-47076

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when visiting the affected page. CVE-2025-4...

CVE-2024-26036

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2024-26036). An attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerable field. AE...

CVE-2024-26060

CVE-2024-26060 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The vulnerability is a stored Cross‑Site Scripting (XSS) flaw in vulnerable form fields that allows an attacker to inject malicious JavaScript, which can execute in a victim’s browser when they visit a page contain...

CVE-2024-26072

CVE-2024-26072 affects Adobe Experience Manager versions 6.5.20 and earlier with a DOM-based Cross-Site Scripting (XSS) vulnerability that can allow an attacker to execute arbitrary JavaScript in the victim’s browser session. Exploitation typically requires user interaction (e.g., clicking a craf...

CVE-2024-26081

CVE-2024-26081 affects Adobe Experience Manager 6.5.20 and earlier. It is a stored XSS vulnerability: an attacker could inject malicious scripts into vulnerable form fields, with JavaScript executed in the victim’s browser when loading the page. The issue is confirmed by multiple sources and has ...

CVE-2024-26111

CVE-2024-26111 affects Adobe Experience Manager 6.5.20 and earlier and is a reflected XSS flaw. An attacker must lure a user to a vulnerable URL, resulting in malicious JavaScript executing in the victim’s browser (impact: local in-browser data/behavior). The CVSSv3.1 base score is 5.4 (Medium). ...

CVE-2024-26117

CVE-2024-26117 affects Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The vulnerability is a reflected Cross-Site Scripting (XSS) that allows an attacker to induce a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser....

CVE-2024-34128

CVE-2024-34128 concerns Adobe Experience Manager (AEM) with a stored Cross-Site Scripting (XSS) vulnerability in versions 6.5.20 and earlier. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which may execute JavaScript when a victim navigates to...

CVE-2024-36148

CVE-2024-36148 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected...

CVE-2024-36151

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-36151). The issue allows an attacker to execute arbitrary JavaScript in the context of a victim’s browser when a user visits a page containing a maliciously cr...

CVE-2024-36154

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The CVE-2024-36154 entry cites improper input handling that allows injection of malicious JavaScript, which could run in a victim’s browser when ...

CVE-2024-36156

CVE-2024-36156 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow an attacker to inject malicious scripts, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2024-36171

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling injection of malicious scripts that execute in a user’s browser when loading the page containing the vulnerable field. The CVE entry is ...

CVE-2024-36207

CVE-2024-36207: Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable input. The NVD entry confirms a stored XSS is...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43734

CVE-2024-43734 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. The issue allows injection of malicious scripts that can execute in a victim’s browser when visiting pages containing the affected fields. Exploitation deta...

CVE-2024-43746

Adobe Experience Manager 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability (CVE-2024-43746). Malicious scripts can be injected into vulnerable form fields and executed in a victim’s browser when the page containing the field is accessed. The issue is documented ...

CVE-2024-52852

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by CVE-2024-52852, a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could execute in a victim’s browser when the page containing the affected field is viewed. Connected sources confirm ...

CVE-2024-53965

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-53965). The root cause is manipulation of a DOM element via a crafted URL or user input, enabling a low-privileged attacker to run arbitrary scripts in the vic...

CVE-2025-47015

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field. The issue is ...

CVE-2025-47049

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue allows malicious JavaScript execution in a victim’s browser when a user visits a specially crafted page; exploitation requires user interaction. Multiple connected sour...

CVE-2025-47056

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting the page containing the vulnerable field. The CVE...

CVE-2025-47092

Summary of CVE-2025-47092 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vuln...

CVE-2024-26053

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are documented to contain a DOM-based Cross-Site Scripting (XSS) vulnerability that could allow an attacker to execute arbitrary JavaScript in a victim’s browser. Exploitation requires user interaction (e.g., clicking a crafted link or su...

CVE-2024-26082

Affected product/versions: Adobe Experience Manager (AEM) 6.5.20 and earlier. Vulnerability type: Stored Cross-Site Scripting (XSS) in vulnerable form fields. Root cause/impact: Malicious JavaScript can be injected and executed in a victim’s browser when visiting a page containing the vulnerable ...

CVE-2024-26092

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. CVE-2024-26092 is documented with a MEDIUM severity (CVSS v3.1: 5.4) and requires user interaction for exploitation, with the attack vector considered net...

CVE-2024-36144

CVE-2024-36144 : Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored XSS vulnerability in form fields. The root cause is inadequate input sanitization, allowing attacker-supplied scripts to run in a victim’s browser when visiting pages containing the vulnerable fie...

CVE-2024-36146

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS in vulnerable form fields. Malicious JavaScript can execute in a user’s browser when they view a page with the vulnerable field. Remediation: apply the APSB24-28 updates (AEM 6.5.21+ per advisories/patch notes).