CVE-2024-52829

CVE-2024-52829 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields that could lead to malicious JavaScript execution in a victim’s browser. The connected sources confirm the existence of stored XSS (and related DOM-based variants) i...

CVE-2024-52858

CVE-2024-52858 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields. An attacker can inject malicious JavaScript that executes in a victim’s browser when the page containing the vulnerable field is loaded or interacted with. Affected...

CVE-2025-46845

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, which could allow a low‑privilege attacker to inject malicious scripts and cause the attacker’s code to run in a victim’s browser when visiting a page containin...

CVE-2025-46922

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are vulnerable to a stored Cross-Site Scripting (XSS) issue in vulnerable form fields. The flaw allows a low-privileged attacker to inject malicious scripts, which can execute in a victim’s browser when they visit the affected page. Root ...

CVE-2025-46971

CVE-2025-46971 describes a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.5.22 and earlier . The issue can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, with execution of JavaScript in victims’ browsers when...

CVE-2025-46985

CVE-2025-46985 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker, with user interaction, can inject malicious JavaScript that executes in the victim’s browser. Remediat...

CVE-2025-47083

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page with the ...

CVE-2024-20779

Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Root cause described in PT-2024-2857 as inadequate protection of the web page structure, allowing injected JavaScript to execute in a victim’s browser. AEM APSB24-21 pr...

CVE-2024-26078

Adobe Experience Manager (AEM) 6.5.20 and earlier contains a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied scripts to execute in a victim’s browser. The issue is explicitly tied to CVE-2024-26078 and is cited alongside related XSS CVEs in th...

CVE-2024-26111

CVE-2024-26111 affects Adobe Experience Manager 6.5.20 and earlier and is a reflected XSS flaw. An attacker must lure a user to a vulnerable URL, resulting in malicious JavaScript executing in the victim’s browser (impact: local in-browser data/behavior). The CVSSv3.1 base score is 5.4 (Medium). ...

CVE-2024-26123

CVE-2024-26123 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS vulnerability in form fields. The issue allows injected JavaScript to run in a victim’s browser when visiting vulnerable pages. CVSS 3.1 base score is 5.4 (Medium) with Network access, Low attack complexity...

CVE-2024-36149

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious JavaScript that runs in a victim’s browser when loading a page with the affected field. The CVE entry is supported by NV...

CVE-2024-36154

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The CVE-2024-36154 entry cites improper input handling that allows injection of malicious JavaScript, which could run in a victim’s browser when ...

CVE-2024-36156

CVE-2024-36156 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow an attacker to inject malicious scripts, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2024-36163

Adobe Experience Manager (AEM)

CVE-2024-36164

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript, which is executed in a victim’s browser when visiting a page containing the vul...

CVE-2024-36224

CVE-2024-36224 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a DOM-based XSS vulnerability that can lead to arbitrary JavaScript execution in the victim’s browser, typically requiring user interaction. The NVD/NVD-provided metrics show CVSS v3.1 base score 5.4 (medium) with net...

CVE-2024-41847

Summary: CVE-2024-41847 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a reflected Cross-Site Scripting (XSS) vulnerability triggered when a user visits a vulnerable page URL. The underlying issue allows attacker-supplied JavaScript to run in the victim’s browser context. Accordi...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43731

CVE-2024-43731 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with an Improper Authorization (CWE-285) vulnerability that could allow a low-privileged attacker to bypass security controls and impact integrity without user interaction. The issue is corroborated across multiple feeds (NV...

CVE-2024-43754

CVE-2024-43754 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue arises when data from a malicious source is processed by client-side scripts to update the DOM, potentially allowing arbitrary code execution in t...

CVE-2024-45153

CVE-2024-45153 : Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that may execute in a user’s browser when visiting the page containing the field. ...

CVE-2024-52847

CVE-2024-52847 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier and describes a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields that could cause malicious JavaScript to run in a victim’s browser when visiting the page. Connected advisories confirm multi...

CVE-2024-53962

CVE-2024-53962 is a stored Cross-Site Scripting flaw in Adobe Experience Manager (AEM) for versions 6.5.21 and earlier. The underlying issue is unvalidated input written into vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that can execute in a victim’s browser whe...

CVE-2024-53964

Adobe Experience Manager (AEM) prior to 6.5.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious scripts, which can execute in a victim’s browser when visiting pages containing the vulnerable f...

CVE-2025-46844

Adobe Experience Manager CVE-2025-46844 affects AEM 6.5.22 and earlier with a stored XSS in vulnerable form fields. Exploitation by a low-privileged user who can cause a victim’s browser to execute malicious JavaScript when visiting a page containing the vulnerable field is described in multiple ...

CVE-2025-46951

CVE-2025-46951 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when ...

CVE-2025-47076

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when visiting the affected page. CVE-2025-4...

CVE-2024-26060

CVE-2024-26060 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The vulnerability is a stored Cross‑Site Scripting (XSS) flaw in vulnerable form fields that allows an attacker to inject malicious JavaScript, which can execute in a victim’s browser when they visit a page contain...

CVE-2024-26072

CVE-2024-26072 affects Adobe Experience Manager versions 6.5.20 and earlier with a DOM-based Cross-Site Scripting (XSS) vulnerability that can allow an attacker to execute arbitrary JavaScript in the victim’s browser session. Exploitation typically requires user interaction (e.g., clicking a craf...

CVE-2024-26081

CVE-2024-26081 affects Adobe Experience Manager 6.5.20 and earlier. It is a stored XSS vulnerability: an attacker could inject malicious scripts into vulnerable form fields, with JavaScript executed in the victim’s browser when loading the page. The issue is confirmed by multiple sources and has ...

CVE-2024-26117

CVE-2024-26117 affects Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The vulnerability is a reflected Cross-Site Scripting (XSS) that allows an attacker to induce a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser....

CVE-2024-34128

CVE-2024-34128 concerns Adobe Experience Manager (AEM) with a stored Cross-Site Scripting (XSS) vulnerability in versions 6.5.20 and earlier. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which may execute JavaScript when a victim navigates to...

CVE-2024-36148

CVE-2024-36148 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected...

CVE-2024-36151

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-36151). The issue allows an attacker to execute arbitrary JavaScript in the context of a victim’s browser when a user visits a page containing a maliciously cr...

CVE-2024-36171

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling injection of malicious scripts that execute in a user’s browser when loading the page containing the vulnerable field. The CVE entry is ...

CVE-2024-36190

CVE-2024-36190 affects Adobe Experience Manager (AEM) versions ≤ 6.5.20. The issue is a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary JavaScript in the victim’s browser context, typically requiring user interaction (e.g., clicking a crafted link o...

CVE-2024-36207

CVE-2024-36207: Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable input. The NVD entry confirms a stored XSS is...

CVE-2024-43734

CVE-2024-43734 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. The issue allows injection of malicious scripts that can execute in a victim’s browser when visiting pages containing the affected fields. Exploitation deta...

CVE-2024-43746

Adobe Experience Manager 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability (CVE-2024-43746). Malicious scripts can be injected into vulnerable form fields and executed in a victim’s browser when the page containing the field is accessed. The issue is documented ...

CVE-2024-52852

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by CVE-2024-52852, a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could execute in a victim’s browser when the page containing the affected field is viewed. Connected sources confirm ...

CVE-2024-53965

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-53965). The root cause is manipulation of a DOM element via a crafted URL or user input, enabling a low-privileged attacker to run arbitrary scripts in the vic...

CVE-2025-46903

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker, with user interaction, to inject JavaScript that can execute in victims’ browsers when they visit the affected ...

CVE-2025-47015

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field. The issue is ...

CVE-2025-47037

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can execute in a victim’s browser when the page containing the vulnerable field is visited. The ...

CVE-2025-47049

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue allows malicious JavaScript execution in a victim’s browser when a user visits a specially crafted page; exploitation requires user interaction. Multiple connected sour...

CVE-2025-47056

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting the page containing the vulnerable field. The CVE...

CVE-2025-47092

Summary of CVE-2025-47092 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vuln...

CVE-2024-26053

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are documented to contain a DOM-based Cross-Site Scripting (XSS) vulnerability that could allow an attacker to execute arbitrary JavaScript in a victim’s browser. Exploitation requires user interaction (e.g., clicking a crafted link or su...

CVE-2024-26082

Affected product/versions: Adobe Experience Manager (AEM) 6.5.20 and earlier. Vulnerability type: Stored Cross-Site Scripting (XSS) in vulnerable form fields. Root cause/impact: Malicious JavaScript can be injected and executed in a victim’s browser when visiting a page containing the vulnerable ...