CVE-2024-45153

CVE-2024-45153 : Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that may execute in a user’s browser when visiting the page containing the field. ...

CVE-2024-52839

Adobe Experience Manager 6.5.21 and earlier are affected by a DOM-based Cross‑Site Scripting (XSS) vulnerability that could allow an attacker to run arbitrary code in the victim’s browser session after user interaction (e.g., clicking a crafted link or submitting input). Affected product/versions...

CVE-2024-52855

CVE-2024-52855 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a Stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The attacker could inject malicious scripts, causing the victim’s browser to execute JavaScript when visiting a page containing the affected ...

CVE-2025-46903

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker, with user interaction, to inject JavaScript that can execute in victims’ browsers when they visit the affected ...

CVE-2025-46939

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored cross-site scripting (XSS) vulnerability due to improper validation of user input. The issue allows a low-privilege attacker to inject malicious scripts into vulnerable form fields, which may execute in a victim’s browser w...

CVE-2025-46971

CVE-2025-46971 describes a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.5.22 and earlier . The issue can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, with execution of JavaScript in victims’ browsers when...

CVE-2025-47049

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue allows malicious JavaScript execution in a victim’s browser when a user visits a specially crafted page; exploitation requires user interaction. Multiple connected sour...

CVE-2025-47056

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting the page containing the vulnerable field. The CVE...

CVE-2023-51460

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could abuse this to inject malicious scripts, which execute in a victim’s browser when visiting the affected page. The CVE’s metrics indicate network-based a...

CVE-2024-26083

CVE-2024-26083 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The flaw is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to execute in a victim’s browser when loading a page with the affected field. CVSS v3.1 base score is 5....

CVE-2024-26092

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. CVE-2024-26092 is documented with a MEDIUM severity (CVSS v3.1: 5.4) and requires user interaction for exploitation, with the attack vector considered net...

CVE-2024-34119

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript that can execute in a victim’s browser when the page containing the field is loaded or interac...

CVE-2024-34142

Adobe Experience Manager CVE-2024-34142 affects versions 6.5.20 and earlier with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when visiting pages containing the vulnerable fiel...

CVE-2024-36153

CVE-2024-36153 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerabl...

CVE-2024-36183

CVE-2024-36183 refers to a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The affected component is within AEM’s web-facing handling that enables execution of arbitrary JavaScript in the victim’s browser session, with exploitation...

CVE-2024-36191

CVE-2024-36191 affects Adobe Experience Manager 6.5.20 and earlier with a stored XSS in vulnerable form fields. The issue allows malicious JavaScript to execute in a victim’s browser when visiting pages containing the affected fields. CVSS 3.1 base score 5.4 (Medium); attack vector NETWORK, attac...

CVE-2024-36192

CVE-2024-36192 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields. The attack could cause malicious JavaScript to execute in a victim’s browser when visiting a page co...

CVE-2024-36194

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript, which could execute in a victim’s browser when loading the page with the vulnerable field (root cause:...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43748

CVE-2024-43748 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when the page containing the field is loaded. Adobe’s APSB24-69 advisory confirms updates to address these ...

CVE-2024-52834

Adobe Experience Manager (AEM) 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2024-52834). Malicious JavaScript can execute in a victim’s browser when the page containing the vulnerable field is loaded. Connected sources confirm ...

CVE-2024-52844

CVE-2024-52844 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code in the victim’s browser context when a user interacts with manipulated input or a crafted URL. Exploitation ...

CVE-2025-46845

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, which could allow a low‑privilege attacker to inject malicious scripts and cause the attacker’s code to run in a victim’s browser when visiting a page containin...

CVE-2025-46942

CVE-2025-46942 concerns Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript, which would execute in a victim’s browser when visiting a page containing the tain...

CVE-2025-47016

Technical details about CVE-2025-47016 are not provided in the connected documents. The available sources reiterate a stored XSS in Adobe Experience Manager 6.5.22 and earlier; monitor for updated advisories or patches.

CVE-2025-47037

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can execute in a victim’s browser when the page containing the vulnerable field is visited. The ...

CVE-2025-47041

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page. AEM’s ecosystem is refer...

CVE-2025-47062

CVE-2025-47062 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when the page is visited (requires user interaction). Remediation is to update to a fixe...

CVE-2025-47117

CVE-2025-47117 relates to a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue affects vulnerable form fields where injected JavaScript can execute in a victim’s browser when accessing the affected page. The documented exploit ...

CVE-2024-20769

CVE-2024-20769 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability that could allow injection of malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser when loading the affected p...

CVE-2024-26066

Affected product: Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue: stored Cross-Site Scripting (XSS) in vulnerable form fields that could allow an attacker to inject malicious JavaScript, executing in a victim’s browser when visiting the page containing the field. Root cause: XSS in form...

CVE-2024-26068

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The underlying issue allows attacker‑supplied scripts to execute in a victim’s browser when visiting a page containing the vulnerable field. Exploitation requires user interaction and...

CVE-2024-26086

Adobe Experience Manager (AEM) prior to version 6.5.21 is affected by CVE-2024-26086, a reflected Cross-Site Scripting (XSS) vulnerability. A malicious actor can trigger execution of arbitrary JavaScript in the victim’s browser by convincing a user to visit a crafted URL referencing a vulnerable ...

CVE-2024-26095

Summary of CVE-2024-26095 (Adobe Experience Manager) : AEM 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that executes in a victim’s browser when loading the affected page. The do...

CVE-2024-36172

CVE-2024-36172 concerns Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing t...

CVE-2024-36173

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied JavaScript to run in a victim’s browser when visiting the page containing the field. The issue is cited across multipl...

CVE-2024-36178

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored XSS vulnerability in form fields (improper validation of user input). An attacker could inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. CVE-2024-36178 is the identifier for this issu...

CVE-2024-36179

CVE-2024-36179 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a stored Cross-Site Scripting (XSS) vulnerability exists in vulnerable form fields. An attacker can inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containing the pay...

CVE-2024-36212

CVE-2024-36212 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw that allows an attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing in a victim’s browser when loadi...

CVE-2024-36215

Adobe Experience Manager CVE-2024-36215 affects AEM 6.5.20 and earlier, with a stored XSS vulnerability in vulnerable form fields that could allow injection of JavaScript executed in a victim’s browser. The issue arises from inadequate input validation in forms, enabling malicious scripts to run ...

CVE-2024-36233

CVE-2024-36233 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a DOM-based Cross-Site Scripting (XSS) vulnerability exists. The flaw can let an attacker execute arbitrary JavaScript in the victim’s browser session, with exploitation typically requiring user interaction ...

CVE-2024-43714

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability that can execute arbitrary code in the victim’s browser when a DOM element is manipulated via crafted URL or user input; exploitation requires user interaction. Affected products: AEM 6.5.x up...

CVE-2024-43719

CVE-2024-43719 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) issue where an attacker can inject malicious scripts by manipulating a DOM element through a crafted URL or user input, with execution occurring in the vi...

CVE-2024-43728

CVE-2024-43728 is a stored Cross‑Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) , affecting versions 6.5.21 and earlier . The issue arises in vulnerable form fields where attacker input can inject malicious JavaScript, which will execute in a victim’s browser when visiting t...

CVE-2024-43751

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored XSS vulnerability (CVE-2024-43751) in vulnerable form fields, potentially allowing malicious JavaScript to run in a victim’s browser. Mitigation: update to AEM 6.5.22 or newer (per APSB24-69 and related advisories); apply ...

CVE-2024-52818

CVE-2024-52818 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier , with a stored XSS in vulnerable form fields that could execute malicious JavaScript in a victim’s browser when visiting the page containing the field. Connected advisories indicate a remediation path: update to AE...

CVE-2024-52822

CVE-2024-52822 affects Adobe Experience Manager 6.5.21 and earlier with a DOM-based XSS vulnerability. Exploitation requires user interaction (crafted URL/input); successful abuse could run arbitrary scripts in the victim’s browser. Remediation per connected sources: upgrade to AEM 6.5.22 or late...

CVE-2024-52854

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, allowing injected JavaScript to run in victims’ browsers. The issue is documented as CVE-2024-52854 with a MEDIUM severity (CVSS 3.1: 5.4). Connected sour...

CVE-2024-53965

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-53965). The root cause is manipulation of a DOM element via a crafted URL or user input, enabling a low-privileged attacker to run arbitrary scripts in the vic...

CVE-2025-47015

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field. The issue is ...