CVE-2024-26111

CVE-2024-26111 affects Adobe Experience Manager 6.5.20 and earlier and is a reflected XSS flaw. An attacker must lure a user to a vulnerable URL, resulting in malicious JavaScript executing in the victim’s browser (impact: local in-browser data/behavior). The CVSSv3.1 base score is 5.4 (Medium). ...

CVE-2024-36151

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-36151). The issue allows an attacker to execute arbitrary JavaScript in the context of a victim’s browser when a user visits a page containing a maliciously cr...

CVE-2024-36169

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, enabling attackers to inject malicious JavaScript that executes in a victim’s browser when visiting the page containing the field. Root cause: stored XSS ...

CVE-2024-36184

CVE-2024-36184 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. It is a DOM-based Cross-Site Scripting (XSS) vulnerability that could allow arbitrary JavaScript to execute in a victim’s browser context, typically requiring user interaction (e.g., clicking a malicious link or su...

CVE-2024-36207

CVE-2024-36207: Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable input. The NVD entry confirms a stored XSS is...

CVE-2024-41876

Adobe Experience Manager (AEM) CVE-2024-41876 affects v6.5.20 and earlier and is a reflected Cross-Site Scripting (XSS) vulnerability. Attack requires a user to visit a crafted URL referencing a vulnerable page, which can cause malicious JavaScript to execute in the victim’s browser. The issue is...

CVE-2024-43755

CVE-2024-43755 affects Adobe Experience Manager 6.5.21 and earlier. Described as an Improper Input Validation vulnerability that can bypass security features and impact page integrity; exploitation requires user interaction. Adobe published APSB24-69 with updates to address multiple vulnerabiliti...

CVE-2024-52857

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied JavaScript to execute in a victim’s browser. This CVE (CVE-2024-52857) has a CVSS v3.1 base score of 5.4 (Medium) with...

CVE-2024-52858

CVE-2024-52858 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields. An attacker can inject malicious JavaScript that executes in a victim’s browser when the page containing the vulnerable field is loaded or interacted with. Affected...

CVE-2024-52992

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored XSS vulnerability (CVE-2024-52992). Malicious JavaScript in vulnerable form fields can execute in a victim’s browser when the page is loaded. CVSSv3.1 base score 5.4 (Medium) with network attack vector, low complexity, low...

CVE-2025-46951

CVE-2025-46951 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when ...

CVE-2025-47015

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field. The issue is ...

CVE-2025-47075

CVE-2025-47075 corresponds to a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which execute in a victim’s browser when visiting the ...

CVE-2024-36141

CVE-2024-36141 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The described vulnerability is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that may execute in a victim’s browser when visiting the affe...

CVE-2024-36148

CVE-2024-36148 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected...

CVE-2024-36149

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript that runs in a victim’s browser when loading a page with the affected field. The CVE entry is supported by NV...

CVE-2024-36156

CVE-2024-36156 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow an attacker to inject malicious scripts, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2024-36164

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript, which is executed in a victim’s browser when visiting a page containing the vul...

CVE-2024-36171

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling injection of malicious scripts that execute in a user’s browser when loading the page containing the vulnerable field. The CVE entry is ...

CVE-2024-36182

CVE-2024-36182 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing injection of malicious JavaScript that runs in a victim’s browser when visiting pages containing those fields. The CVE is linked t...

CVE-2024-36190

CVE-2024-36190 affects Adobe Experience Manager (AEM) versions ≤ 6.5.20. The issue is a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary JavaScript in the victim’s browser context, typically requiring user interaction (e.g., clicking a crafted link o...

CVE-2024-36206

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a reflected XSS vulnerability (CVE-2024-36206). An attacker must lure a user to visit a crafted URL referencing a vulnerable page, enabling malicious JavaScript to run in the victim’s browser. CVSS shows Network attack vector, Low ...

CVE-2024-36225

CVE-2024-36225 affects Adobe Experience Manager versions 6.5.20 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could be executed in a victim’s browser when loading pages containing the vulnerable field. The issue is documented in...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43754

CVE-2024-43754 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue arises when data from a malicious source is processed by client-side scripts to update the DOM, potentially allowing arbitrary code execution in t...

CVE-2024-45153

CVE-2024-45153 : Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that may execute in a user’s browser when visiting the page containing the field. ...

CVE-2024-52829

CVE-2024-52829 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields that could lead to malicious JavaScript execution in a victim’s browser. The connected sources confirm the existence of stored XSS (and related DOM-based variants) i...

CVE-2024-52831

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features. Exploitation requires user interaction and could affect page integrity with low privileges. CVSS v3.1 base score 3.5 (LOW). Adobe has...

CVE-2024-52834

Adobe Experience Manager (AEM) 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2024-52834). Malicious JavaScript can execute in a victim’s browser when the page containing the vulnerable field is loaded. Connected sources confirm ...

CVE-2024-52839

Adobe Experience Manager 6.5.21 and earlier are affected by a DOM-based Cross‑Site Scripting (XSS) vulnerability that could allow an attacker to run arbitrary code in the victim’s browser session after user interaction (e.g., clicking a crafted link or submitting input). Affected product/versions...

CVE-2024-52852

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by CVE-2024-52852, a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could execute in a victim’s browser when the page containing the affected field is viewed. Connected sources confirm ...

CVE-2025-46874

CVE-2025-46874 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The issue is a reflected Cross-Site Scripting (XSS) vulnerability where a low-privilege attacker can lure a victim to a crafted URL, causing malicious JavaScript to run in the victim’s browser. Evidence in the provided docu...

CVE-2025-46903

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker, with user interaction, to inject JavaScript that can execute in victims’ browsers when they visit the affected ...

CVE-2025-46985

CVE-2025-46985 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker, with user interaction, can inject malicious JavaScript that executes in the victim’s browser. Remediat...

CVE-2024-20779

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Root cause described in PT-2024-2857 as inadequate protection of the web page structure, allowing injected JavaScript to execute in a victim’s browser. AEM APSB24-21 pr...

CVE-2024-26123

CVE-2024-26123 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS vulnerability in form fields. The issue allows injected JavaScript to run in a victim’s browser when visiting vulnerable pages. CVSS 3.1 base score is 5.4 (Medium) with Network access, Low attack complexity...

CVE-2024-34128

CVE-2024-34128 concerns Adobe Experience Manager (AEM) with a stored Cross-Site Scripting (XSS) vulnerability in versions 6.5.20 and earlier. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which may execute JavaScript when a victim navigates to...

CVE-2024-34142

Adobe Experience Manager CVE-2024-34142 affects versions 6.5.20 and earlier with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when visiting pages containing the vulnerable fiel...

CVE-2024-36180

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The flaw could allow an attacker to inject malicious JavaScript, which may be executed in a victim’s browser when visiting the page containing the vulnera...

CVE-2024-36183

CVE-2024-36183 refers to a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The affected component is within AEM’s web-facing handling that enables execution of arbitrary JavaScript in the victim’s browser session, with exploitation...

CVE-2024-36212

CVE-2024-36212 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw that allows an attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing in a victim’s browser when loadi...

CVE-2024-36224

CVE-2024-36224 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a DOM-based XSS vulnerability that can lead to arbitrary JavaScript execution in the victim’s browser, typically requiring user interaction. The NVD/NVD-provided metrics show CVSS v3.1 base score 5.4 (medium) with net...

CVE-2024-41846

Affected product/versions: Adobe Experience Manager (AEM) 6.5.20 and earlier. Vulnerability details: Stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can inject malicious scripts; attacker-delivered JavaScript may execute in a victim’s browser when they visit a page ...

CVE-2024-41847

Summary: CVE-2024-41847 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a reflected Cross-Site Scripting (XSS) vulnerability triggered when a user visits a vulnerable page URL. The underlying issue allows attacker-supplied JavaScript to run in the victim’s browser context. Accordi...

CVE-2024-43714

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability that can execute arbitrary code in the victim’s browser when a DOM element is manipulated via crafted URL or user input; exploitation requires user interaction. Affected products: AEM 6.5.x up...

CVE-2024-43734

CVE-2024-43734 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. The issue allows injection of malicious scripts that can execute in a victim’s browser when visiting pages containing the affected fields. Exploitation deta...

CVE-2024-43751

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored XSS vulnerability (CVE-2024-43751) in vulnerable form fields, potentially allowing malicious JavaScript to run in a victim’s browser. Mitigation: update to AEM 6.5.22 or newer (per APSB24-69 and related advisories); apply ...

CVE-2024-52823

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-52823) that could allow an attacker to execute arbitrary code in the victim’s browser session when a crafted URL or user input manipulates a DOM element. Explo...

CVE-2024-52847

CVE-2024-52847 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier and describes a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields that could cause malicious JavaScript to run in a victim’s browser when visiting the page. Connected advisories confirm multi...

CVE-2025-46844

Adobe Experience Manager CVE-2025-46844 affects AEM 6.5.22 and earlier with a stored XSS in vulnerable form fields. Exploitation by a low-privileged user who can cause a victim’s browser to execute malicious JavaScript when visiting a page containing the vulnerable field is described in multiple ...