CVE-2024-43734

CVE-2024-43734 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. The issue allows injection of malicious scripts that can execute in a victim’s browser when visiting pages containing the affected fields. Exploitation deta...

CVE-2024-52831

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features. Exploitation requires user interaction and could affect page integrity with low privileges. CVSS v3.1 base score 3.5 (LOW). Adobe has...

CVE-2024-52844

CVE-2024-52844 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code in the victim’s browser context when a user interacts with manipulated input or a crafted URL. Exploitation ...

CVE-2024-52847

CVE-2024-52847 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier and describes a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields that could cause malicious JavaScript to run in a victim’s browser when visiting the page. Connected advisories confirm multi...

CVE-2024-52852

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by CVE-2024-52852, a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could execute in a victim’s browser when the page containing the affected field is viewed. Connected sources confirm ...

CVE-2024-52854

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, allowing injected JavaScript to run in victims’ browsers. The issue is documented as CVE-2024-52854 with a MEDIUM severity (CVSS 3.1: 5.4). Connected sour...

CVE-2024-53964

Adobe Experience Manager (AEM) prior to 6.5.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious scripts, which can execute in a victim’s browser when visiting pages containing the vulnerable f...

CVE-2025-46922

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are vulnerable to a stored Cross-Site Scripting (XSS) issue in vulnerable form fields. The flaw allows a low-privileged attacker to inject malicious scripts, which can execute in a victim’s browser when they visit the affected page. Root ...

CVE-2025-46939

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored cross-site scripting (XSS) vulnerability due to improper validation of user input. The issue allows a low-privilege attacker to inject malicious scripts into vulnerable form fields, which may execute in a victim’s browser w...

CVE-2025-46985

CVE-2025-46985 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker, with user interaction, can inject malicious JavaScript that executes in the victim’s browser. Remediat...

CVE-2025-47088

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. An attacker with low privileges can inject malicious scripts that execute in a victim’s browser when visiting the affected page. Mitigation: apply the updates/patches describ...

CVE-2024-20769

CVE-2024-20769 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability that could allow injection of malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser when loading the affected p...

CVE-2024-26060

CVE-2024-26060 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The vulnerability is a stored Cross‑Site Scripting (XSS) flaw in vulnerable form fields that allows an attacker to inject malicious JavaScript, which can execute in a victim’s browser when they visit a page contain...

CVE-2024-26066

Affected product: Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue: stored Cross-Site Scripting (XSS) in vulnerable form fields that could allow an attacker to inject malicious JavaScript, executing in a victim’s browser when visiting the page containing the field. Root cause: XSS in form...

CVE-2024-26075

Adobe Experience Manager (AEM) v6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2024-26075). The issue is documented across multiple sources (NVD/CVE references) and is associated with a MEDIUM severity (CVSS v3.1: 5.4) with user...

CVE-2024-36156

CVE-2024-36156 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow an attacker to inject malicious scripts, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2024-36171

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling injection of malicious scripts that execute in a user’s browser when loading the page containing the vulnerable field. The CVE entry is ...

CVE-2024-36172

CVE-2024-36172 concerns Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing t...

CVE-2024-36194

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript, which could execute in a victim’s browser when loading the page with the vulnerable field (root cause:...

CVE-2024-36207

CVE-2024-36207: Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable input. The NVD entry confirms a stored XSS is...

CVE-2024-36215

Adobe Experience Manager CVE-2024-36215 affects AEM 6.5.20 and earlier, with a stored XSS vulnerability in vulnerable form fields that could allow injection of JavaScript executed in a victim’s browser. The issue arises from inadequate input validation in forms, enabling malicious scripts to run ...

CVE-2024-36224

CVE-2024-36224 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a DOM-based XSS vulnerability that can lead to arbitrary JavaScript execution in the victim’s browser, typically requiring user interaction. The NVD/NVD-provided metrics show CVSS v3.1 base score 5.4 (medium) with net...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43740

CVE-2024-43740 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue allows an attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when the page with the vulnerable fie...

CVE-2024-43751

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored XSS vulnerability (CVE-2024-43751) in vulnerable form fields, potentially allowing malicious JavaScript to run in a victim’s browser. Mitigation: update to AEM 6.5.22 or newer (per APSB24-69 and related advisories); apply ...

CVE-2024-52818

CVE-2024-52818 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier , with a stored XSS in vulnerable form fields that could execute malicious JavaScript in a victim’s browser when visiting the page containing the field. Connected advisories indicate a remediation path: update to AE...

CVE-2024-52822

CVE-2024-52822 affects Adobe Experience Manager 6.5.21 and earlier with a DOM-based XSS vulnerability. Exploitation requires user interaction (crafted URL/input); successful abuse could run arbitrary scripts in the victim’s browser. Remediation per connected sources: upgrade to AEM 6.5.22 or late...

CVE-2024-52842

CVE-2024-52842 affects Adobe Experience Manager (AEM)

CVE-2024-52858

CVE-2024-52858 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields. An attacker can inject malicious JavaScript that executes in a victim’s browser when the page containing the vulnerable field is loaded or interacted with. Affected...

CVE-2025-46838

CVE-2025-46838 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting pages containing those fie...

CVE-2025-46844

Adobe Experience Manager CVE-2025-46844 affects AEM 6.5.22 and earlier with a stored XSS in vulnerable form fields. Exploitation by a low-privileged user who can cause a victim’s browser to execute malicious JavaScript when visiting a page containing the vulnerable field is described in multiple ...

CVE-2025-46942

CVE-2025-46942 concerns Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript, which would execute in a victim’s browser when visiting a page containing the tain...

CVE-2025-47062

CVE-2025-47062 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when the page is visited (requires user interaction). Remediation is to update to a fixe...

CVE-2023-51459

Adobe Experience Manager 6.5.18 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability. A low‑privileged attacker can lure a victim to a crafted URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. Impact is limited to confident...

CVE-2024-26053

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are documented to contain a DOM-based Cross-Site Scripting (XSS) vulnerability that could allow an attacker to execute arbitrary JavaScript in a victim’s browser. Exploitation requires user interaction (e.g., clicking a crafted link or su...

CVE-2024-36152

Affected software : Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue : stored Cross‑Site Scripting (XSS) in vulnerable form fields allowing injection of malicious JavaScript. Impact : could cause the attacker’s script to run in a user’s browser when loading pages containing the vulnerable...

CVE-2024-36165

Summary: CVE-2024-36165 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a stored Cross‑Site Scripting (XSS) issue occurring in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when they visit a page containing the vulnerable field...

CVE-2024-36186

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-36186) in vulnerable form fields, allowing injected JavaScript to run in a victim’s browser when viewing the page containing the field. The issue is addressed by Adobe thr...

CVE-2024-41846

Affected product/versions: Adobe Experience Manager (AEM) 6.5.20 and earlier. Vulnerability details: Stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can inject malicious scripts; attacker-delivered JavaScript may execute in a victim’s browser when they visit a page ...

CVE-2024-43748

CVE-2024-43748 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when the page containing the field is loaded. Adobe’s APSB24-69 advisory confirms updates to address these ...

CVE-2025-47049

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. The issue allows malicious JavaScript execution in a victim’s browser when a user visits a specially crafted page; exploitation requires user interaction. Multiple connected sour...

CVE-2025-47073

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser. The issue is described across multiple sources...

CVE-2025-47092

Summary of CVE-2025-47092 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vuln...

CVE-2026-27223

CVE-2026-27223 affects Adobe Experience Manager (AEM) up to and including version 6.5.23. The vulnerability is a stored cross-site scripting (XSS) flaw in how user-editable form field input is sanitized and output-encoded, allowing an attacker to inject malicious JavaScript that executes in a vic...

CVE-2024-26071

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-26092

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. CVE-2024-26092 is documented with a MEDIUM severity (CVSS v3.1: 5.4) and requires user interaction for exploitation, with the attack vector considered net...

CVE-2024-36178

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored XSS vulnerability in form fields (improper validation of user input). An attacker could inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. CVE-2024-36178 is the identifier for this issu...

CVE-2024-36182

CVE-2024-36182 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing injection of malicious JavaScript that runs in a victim’s browser when visiting pages containing those fields. The CVE is linked t...

CVE-2024-36191

CVE-2024-36191 affects Adobe Experience Manager 6.5.20 and earlier with a stored XSS in vulnerable form fields. The issue allows malicious JavaScript to execute in a victim’s browser when visiting pages containing the affected fields. CVSS 3.1 base score 5.4 (Medium); attack vector NETWORK, attac...

CVE-2024-36192

CVE-2024-36192 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields. The attack could cause malicious JavaScript to execute in a victim’s browser when visiting a page co...