CVE-2024-52839

Adobe Experience Manager 6.5.21 and earlier are affected by a DOM-based Cross‑Site Scripting (XSS) vulnerability that could allow an attacker to run arbitrary code in the victim’s browser session after user interaction (e.g., clicking a crafted link or submitting input). Affected product/versions...

CVE-2024-52844

CVE-2024-52844 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code in the victim’s browser context when a user interacts with manipulated input or a crafted URL. Exploitation ...

CVE-2024-52846

CVE-2024-52846 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields that could inject malicious JavaScript into a victim’s browser. The issue is confirmed in multiple corroborating sources (NVD/NASA references and Adobe APSB24-69). R...

CVE-2024-52855

CVE-2024-52855 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a Stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The attacker could inject malicious scripts, causing the victim’s browser to execute JavaScript when visiting a page containing the affected ...

CVE-2025-46903

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker, with user interaction, to inject JavaScript that can execute in victims’ browsers when they visit the affected ...

CVE-2025-46939

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored cross-site scripting (XSS) vulnerability due to improper validation of user input. The issue allows a low-privilege attacker to inject malicious scripts into vulnerable form fields, which may execute in a victim’s browser w...

CVE-2025-46942

CVE-2025-46942 concerns Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript, which would execute in a victim’s browser when visiting a page containing the tain...

CVE-2025-47016

Technical details about CVE-2025-47016 are not provided in the connected documents. The available sources reiterate a stored XSS in Adobe Experience Manager 6.5.22 and earlier; monitor for updated advisories or patches.

CVE-2025-47037

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can execute in a victim’s browser when the page containing the vulnerable field is visited. The ...

CVE-2025-47117

CVE-2025-47117 relates to a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue affects vulnerable form fields where injected JavaScript can execute in a victim’s browser when accessing the affected page. The documented exploit ...

CVE-2024-20769

CVE-2024-20769 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability that could allow injection of malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser when loading the affected p...

CVE-2024-34142

Adobe Experience Manager CVE-2024-34142 affects versions 6.5.20 and earlier with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may execute in a victim’s browser when visiting pages containing the vulnerable fiel...

CVE-2024-36144

CVE-2024-36144 : Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored XSS vulnerability in form fields. The root cause is inadequate input sanitization, allowing attacker-supplied scripts to run in a victim’s browser when visiting pages containing the vulnerable fie...

CVE-2024-36152

Affected software : Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue : stored Cross‑Site Scripting (XSS) in vulnerable form fields allowing injection of malicious JavaScript. Impact : could cause the attacker’s script to run in a user’s browser when loading pages containing the vulnerable...

CVE-2024-36153

CVE-2024-36153 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerabl...

CVE-2024-36165

Summary: CVE-2024-36165 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and is a stored Cross‑Site Scripting (XSS) issue occurring in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when they visit a page containing the vulnerable field...

CVE-2024-36183

CVE-2024-36183 refers to a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The affected component is within AEM’s web-facing handling that enables execution of arbitrary JavaScript in the victim’s browser session, with exploitation...

CVE-2024-36190

CVE-2024-36190 affects Adobe Experience Manager (AEM) versions ≤ 6.5.20. The issue is a DOM-based Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary JavaScript in the victim’s browser context, typically requiring user interaction (e.g., clicking a crafted link o...

CVE-2024-36194

Adobe Experience Manager (AEM) v6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript, which could execute in a victim’s browser when loading the page with the vulnerable field (root cause:...

CVE-2024-36200

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields, allowing injected JavaScript to run in victims’ browsers. Public fixes are provided via APSB24-28; Nessus notes remediation by upgrading to 6.5.21+ (i.e., 6.5.21 or newer). CVSSv3.1 b...

CVE-2024-36207

CVE-2024-36207: Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. Exploitation could cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable input. The NVD entry confirms a stored XSS is...

CVE-2024-41847

Summary: CVE-2024-41847 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a reflected Cross-Site Scripting (XSS) vulnerability triggered when a user visits a vulnerable page URL. The underlying issue allows attacker-supplied JavaScript to run in the victim’s browser context. Accordi...

CVE-2024-43723

CVE-2024-43723 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability arises when a DOM element is manipulated via crafted URLs or user input, allowing injection of scripts that run in the victim’s browser context after render...

CVE-2024-43740

CVE-2024-43740 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue allows an attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when the page with the vulnerable fie...

CVE-2024-52818

CVE-2024-52818 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier , with a stored XSS in vulnerable form fields that could execute malicious JavaScript in a victim’s browser when visiting the page containing the field. Connected advisories indicate a remediation path: update to AE...

CVE-2025-46837

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which then execute in the victim’s browser and may lead to session takeover. The vulnerability ...

CVE-2025-46898

Adobe Experience Manager up to version 6.5.22 is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vulnerable field. Remediation: apply the securi...

CVE-2025-47041

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting the affected page. AEM’s ecosystem is refer...

CVE-2025-47062

CVE-2025-47062 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when the page is visited (requires user interaction). Remediation is to update to a fixe...

CVE-2025-47092

Summary of CVE-2025-47092 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vuln...

CVE-2023-51459

Adobe Experience Manager 6.5.18 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability. A low‑privileged attacker can lure a victim to a crafted URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. Impact is limited to confident...

CVE-2023-51460

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could abuse this to inject malicious scripts, which execute in a victim’s browser when visiting the affected page. The CVE’s metrics indicate network-based a...

CVE-2024-26083

CVE-2024-26083 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The flaw is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to execute in a victim’s browser when loading a page with the affected field. CVSS v3.1 base score is 5....

CVE-2024-34119

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript that can execute in a victim’s browser when the page containing the field is loaded or interac...

CVE-2024-36178

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored XSS vulnerability in form fields (improper validation of user input). An attacker could inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. CVE-2024-36178 is the identifier for this issu...

CVE-2024-36191

CVE-2024-36191 affects Adobe Experience Manager 6.5.20 and earlier with a stored XSS in vulnerable form fields. The issue allows malicious JavaScript to execute in a victim’s browser when visiting pages containing the affected fields. CVSS 3.1 base score 5.4 (Medium); attack vector NETWORK, attac...

CVE-2024-36192

CVE-2024-36192 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields. The attack could cause malicious JavaScript to execute in a victim’s browser when visiting a page co...

CVE-2024-36212

CVE-2024-36212 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw that allows an attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing in a victim’s browser when loadi...

CVE-2024-36215

Adobe Experience Manager CVE-2024-36215 affects AEM 6.5.20 and earlier, with a stored XSS vulnerability in vulnerable form fields that could allow injection of JavaScript executed in a victim’s browser. The issue arises from inadequate input validation in forms, enabling malicious scripts to run ...

CVE-2024-43714

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability that can execute arbitrary code in the victim’s browser when a DOM element is manipulated via crafted URL or user input; exploitation requires user interaction. Affected products: AEM 6.5.x up...

CVE-2024-43719

CVE-2024-43719 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The vulnerability is a DOM-based Cross-Site Scripting (XSS) issue where an attacker can inject malicious scripts by manipulating a DOM element through a crafted URL or user input, with execution occurring in the vi...

CVE-2024-43751

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored XSS vulnerability (CVE-2024-43751) in vulnerable form fields, potentially allowing malicious JavaScript to run in a victim’s browser. Mitigation: update to AEM 6.5.22 or newer (per APSB24-69 and related advisories); apply ...

CVE-2024-52822

CVE-2024-52822 affects Adobe Experience Manager 6.5.21 and earlier with a DOM-based XSS vulnerability. Exploitation requires user interaction (crafted URL/input); successful abuse could run arbitrary scripts in the victim’s browser. Remediation per connected sources: upgrade to AEM 6.5.22 or late...

CVE-2024-52836

CVE-2024-52836 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript that runs in a victim’s browser when visiting a page containing the affected field. Public de...

CVE-2024-53965

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2024-53965). The root cause is manipulation of a DOM element via a crafted URL or user input, enabling a low-privileged attacker to run arbitrary scripts in the vic...

CVE-2025-46881

CVE-2025-46881 : Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker could inject malicious scripts into vulnerable form fields, with the malicious JavaScript potentially executing in the victim’s browser...

CVE-2025-47014

Summary: CVE-2025-47014 affects Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript executed in a user’s browser. Affected software (from the provided sources)...

CVE-2025-47073

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser. The issue is described across multiple sources...

CVE-2025-47084

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containing the vuln...

CVE-2024-26066

Affected product: Adobe Experience Manager (AEM) 6.5.20 and earlier. Issue: stored Cross-Site Scripting (XSS) in vulnerable form fields that could allow an attacker to inject malicious JavaScript, executing in a victim’s browser when visiting the page containing the field. Root cause: XSS in form...