CVE-2024-34128

CVE-2024-34128 concerns Adobe Experience Manager (AEM) with a stored Cross-Site Scripting (XSS) vulnerability in versions 6.5.20 and earlier. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which may execute JavaScript when a victim navigates to...

CVE-2024-36144

CVE-2024-36144 : Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored XSS vulnerability in form fields. The root cause is inadequate input sanitization, allowing attacker-supplied scripts to run in a victim’s browser when visiting pages containing the vulnerable fie...

CVE-2024-36146

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS in vulnerable form fields. Malicious JavaScript can execute in a user’s browser when they view a page with the vulnerable field. Remediation: apply the APSB24-28 updates (AEM 6.5.21+ per advisories/patch notes).

CVE-2024-36148

CVE-2024-36148 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected...

CVE-2024-36152

Affected software : Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue : stored Cross‑Site Scripting (XSS) in vulnerable form fields allowing injection of malicious JavaScript. Impact : could cause the attacker’s script to run in a user’s browser when loading pages containing the vulnerable...

CVE-2024-36165

Summary: CVE-2024-36165 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a stored Cross‑Site Scripting (XSS) issue occurring in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when they visit a page containing the vulnerable field...

CVE-2024-36190

CVE-2024-36190 affects Adobe Experience Manager (AEM) versions ≤ 6.5.20. The issue is a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary JavaScript in the victim’s browser context, typically requiring user interaction (e.g., clicking a crafted link o...

CVE-2024-36194

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript, which could execute in a victim’s browser when loading the page with the vulnerable field (root cause:...

CVE-2024-36200

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields, allowing injected JavaScript to run in victims’ browsers. Public fixes are provided via APSB24-28; Nessus notes remediation by upgrading to 6.5.21+ (i.e., 6.5.21 or newer). CVSSv3.1 b...

CVE-2024-36207

CVE-2024-36207: Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable input. The NVD entry confirms a stored XSS is...

CVE-2024-41847

Summary: CVE-2024-41847 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a reflected Cross-Site Scripting (XSS) vulnerability triggered when a user visits a vulnerable page URL. The underlying issue allows attacker-supplied JavaScript to run in the victim’s browser context. Accordi...

CVE-2024-43740

CVE-2024-43740 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue allows an attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when the page with the vulnerable fie...

CVE-2024-43748

CVE-2024-43748 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when the page containing the field is loaded. Adobe’s APSB24-69 advisory confirms updates to address these ...

CVE-2024-45153

CVE-2024-45153 : Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that may execute in a user’s browser when visiting the page containing the field. ...

CVE-2024-52834

Adobe Experience Manager (AEM) 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2024-52834). Malicious JavaScript can execute in a victim’s browser when the page containing the vulnerable field is loaded. Connected sources confirm ...

CVE-2024-52844

CVE-2024-52844 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code in the victim’s browser context when a user interacts with manipulated input or a crafted URL. Exploitation ...

CVE-2025-46845

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, which could allow a low‑privilege attacker to inject malicious scripts and cause the attacker’s code to run in a victim’s browser when visiting a page containin...

CVE-2025-46898

Adobe Experience Manager up to version 6.5.22 is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vulnerable field. Remediation: apply the securi...

CVE-2025-46942

CVE-2025-46942 concerns Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript, which would execute in a victim’s browser when visiting a page containing the tain...

CVE-2025-47041

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page. AEM’s ecosystem is refer...

CVE-2025-47062

CVE-2025-47062 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when the page is visited (requires user interaction). Remediation is to update to a fixe...

CVE-2023-51460

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could abuse this to inject malicious scripts, which execute in a victim’s browser when visiting the affected page. The CVE’s metrics indicate network-based a...

CVE-2024-26083

CVE-2024-26083 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The flaw is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to execute in a victim’s browser when loading a page with the affected field. CVSS v3.1 base score is 5....

CVE-2024-34119

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript that can execute in a victim’s browser when the page containing the field is loaded or interac...

CVE-2024-34142

Adobe Experience Manager CVE-2024-34142 affects versions 6.5.20 and earlier with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when visiting pages containing the vulnerable fiel...

CVE-2024-36153

CVE-2024-36153 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerabl...

CVE-2024-36183

CVE-2024-36183 refers to a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The affected component is within AEM’s web-facing handling that enables execution of arbitrary JavaScript in the victim’s browser session, with exploitation...

CVE-2024-36191

CVE-2024-36191 affects Adobe Experience Manager 6.5.20 and earlier with a stored XSS in vulnerable form fields. The issue allows malicious JavaScript to execute in a victim’s browser when visiting pages containing the affected fields. CVSS 3.1 base score 5.4 (Medium); attack vector NETWORK, attac...

CVE-2024-36192

CVE-2024-36192 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields. The attack could cause malicious JavaScript to execute in a victim’s browser when visiting a page co...

CVE-2024-36212

CVE-2024-36212 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw that allows an attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing in a victim’s browser when loadi...

CVE-2024-43719

CVE-2024-43719 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) issue where an attacker can inject malicious scripts by manipulating a DOM element through a crafted URL or user input, with execution occurring in the vi...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43751

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored XSS vulnerability (CVE-2024-43751) in vulnerable form fields, potentially allowing malicious JavaScript to run in a victim’s browser. Mitigation: update to AEM 6.5.22 or newer (per APSB24-69 and related advisories); apply ...

CVE-2024-52818

CVE-2024-52818 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier , with a stored XSS in vulnerable form fields that could execute malicious JavaScript in a victim’s browser when visiting the page containing the field. Connected advisories indicate a remediation path: update to AE...

CVE-2024-52822

CVE-2024-52822 affects Adobe Experience Manager 6.5.21 and earlier with a DOM-based XSS vulnerability. Exploitation requires user interaction (crafted URL/input); successful abuse could run arbitrary scripts in the victim’s browser. Remediation per connected sources: upgrade to AEM 6.5.22 or late...

CVE-2024-53965

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-53965). The root cause is manipulation of a DOM element via a crafted URL or user input, enabling a low-privileged attacker to run arbitrary scripts in the vic...

CVE-2025-46881

CVE-2025-46881 : Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker could inject malicious scripts into vulnerable form fields, with the malicious JavaScript potentially executing in the victim’s browser...

CVE-2025-47014

Summary: CVE-2025-47014 affects Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript executed in a user’s browser. Affected software (from the provided sources)...

CVE-2025-47015

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field. The issue is ...

CVE-2025-47073

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser. The issue is described across multiple sources...

CVE-2025-47084

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containing the vuln...

CVE-2025-47092

Summary of CVE-2025-47092 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vuln...

CVE-2024-20769

CVE-2024-20769 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability that could allow injection of malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser when loading the affected p...

CVE-2024-26066

Affected product: Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue: stored Cross-Site Scripting (XSS) in vulnerable form fields that could allow an attacker to inject malicious JavaScript, executing in a victim’s browser when visiting the page containing the field. Root cause: XSS in form...

CVE-2024-26068

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The underlying issue allows attacker‑supplied scripts to execute in a victim’s browser when visiting a page containing the vulnerable field. Exploitation requires user interaction and...

CVE-2024-26086

Adobe Experience Manager (AEM) prior to version 6.5.21 is affected by CVE-2024-26086, a reflected Cross-Site Scripting (XSS) vulnerability. A malicious actor can trigger execution of arbitrary JavaScript in the victim’s browser by convincing a user to visit a crafted URL referencing a vulnerable ...

CVE-2024-26095

Summary of CVE-2024-26095 (Adobe Experience Manager) : AEM 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that executes in a victim’s browser when loading the affected page. The do...

CVE-2024-36172

CVE-2024-36172 concerns Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing t...

CVE-2024-36173

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied JavaScript to run in a victim’s browser when visiting the page containing the field. The issue is cited across multipl...

CVE-2024-36178

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored XSS vulnerability in form fields (improper validation of user input). An attacker could inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. CVE-2024-36178 is the identifier for this issu...