CVE-2024-26095

Summary of CVE-2024-26095 (Adobe Experience Manager) : AEM 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious JavaScript that executes in a victim’s browser when loading the affected page. The do...

CVE-2024-36172

CVE-2024-36172 concerns Adobe Experience Manager (AEM) up to version 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing t...

CVE-2024-36173

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied JavaScript to run in a victim’s browser when visiting the page containing the field. The issue is cited across multipl...

CVE-2024-36178

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored XSS vulnerability in form fields (improper validation of user input). An attacker could inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. CVE-2024-36178 is the identifier for this issu...

CVE-2024-36179

CVE-2024-36179 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a stored Cross-Site Scripting (XSS) vulnerability exists in vulnerable form fields. An attacker can inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containing the pay...

CVE-2024-36201

Adobe Experience Manager 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow an attacker to inject and execute malicious JavaScript in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-36215

Adobe Experience Manager CVE-2024-36215 affects AEM 6.5.20 and earlier, with a stored XSS vulnerability in vulnerable form fields that could allow injection of JavaScript executed in a victim’s browser. The issue arises from inadequate input validation in forms, enabling malicious scripts to run ...

CVE-2024-36233

CVE-2024-36233 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a DOM-based Cross-Site Scripting (XSS) vulnerability exists. The flaw can let an attacker execute arbitrary JavaScript in the victim’s browser session, with exploitation typically requiring user interaction ...

CVE-2024-43727

CVE-2024-43727 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a stored Cross-Site Scripting (XSS) vulnerability that can inject malicious scripts into vulnerable form fields, causing Malicious JavaScript to execute in a user’s browser when visiting a page containing the vulnerable...

CVE-2024-43728

CVE-2024-43728 is a stored Cross‑Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) , affecting versions 6.5.21 and earlier . The issue arises in vulnerable form fields where attacker input can inject malicious JavaScript, which will execute in a victim’s browser when visiting t...

CVE-2024-52837

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability caused by unsanitized DOM manipulation via crafted URLs or user input. Exploitation can lead to arbitrary code execution in the victim’s browser session and requires user interaction. Remediat...

CVE-2024-52838

Summary: CVE-2024-52838 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, via a DOM-based Cross-Site Scripting (XSS) vulnerability that could let an attacker run arbitrary code in a victim’s browser. The flaw arises when data from a user-controllable source is used unsafely in the DOM, a...

CVE-2024-52843

CVE-2024-52843 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow injection of malicious JavaScript executed in a victim’s browser when accessing the affected page. Public references ...

CVE-2024-52854

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, allowing injected JavaScript to run in victims’ browsers. The issue is documented as CVE-2024-52854 with a MEDIUM severity (CVSS 3.1: 5.4). Connected sour...

CVE-2025-46838

CVE-2025-46838 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting pages containing those fie...

CVE-2025-46933

CVE-2025-46933 affects Adobe Experience Manager up to version 6.5.22. It is a stored XSS in vulnerable form fields, exploitable by a low-privileged attacker to inject JavaScript that runs in a victim’s browser. Affected product: AEM; affected version: 6.5.22 and earlier. Root cause: stored Cross-...

CVE-2025-46979

CVE-2025-46979 is an in-scope vulnerability affecting Adobe Experience Manager versions 6.5.22 and earlier, described as a stored cross-site scripting (XSS) flaw. A low-privilege attacker can inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s br...

CVE-2025-47007

Adobe Experience Manager (AEM) up to version 6.5.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript that can execute in a victim’s browser when they navigate to a page containing ...

CVE-2025-47029

CVE-2025-47029 affects Adobe Experience Manager (AEM) up to version 6.5.22. The vulnerability is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that runs in a victim’s browser when visiting a page containing the field. T...

CVE-2025-47040

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker with user interaction to inject malicious JavaScript that can execute in a victim’s browser when visiting a pag...

CVE-2025-47090

Summary of CVE-2025-47090 (Adobe Experience Manager) : A stored Cross-Site Scripting (XSS) vulnerability affects AEM versions 6.5.22 and earlier, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When victims visit a page containing the vulnerable field, ...

CVE-2024-26077

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to run in a victim’s browser when visiting a page containing the field. The CVE entry (CVE-2024-26077) is active and referenc...

CVE-2024-34141

CVE-2024-34141 is a stored XSS vulnerability affecting Adobe Experience Manager versions 6.5.20 and earlier. The flaw allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, resulting in JavaScript execution in a victim’s browser when loading the affected page. P...

CVE-2024-36166

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious scripts that can run in a victim’s browser when visiting a page containing the vulnerable fiel...

CVE-2024-36168

CVE-2024-36168 (Adobe Experience Manager) affects AEM 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript into input fields, which can be executed in a victim’s browser when vi...

CVE-2024-36170

Adobe Experience Manager (AEM) up to version 6.5.20 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields due to improper input validation. The CVE-2024-36170 issue can allow an attacker to inject malicious JavaScript that executes in a user’s browser when vis...

CVE-2024-36177

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when visiting the page containing the affected field. The NVD entry...

CVE-2024-36186

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-36186) in vulnerable form fields, allowing injected JavaScript to run in a victim’s browser when viewing the page containing the field. The issue is addressed by Adobe thr...

CVE-2024-36193

Adobe Experience Manager (AEM)

CVE-2024-36197

CVE-2024-36197 affects Adobe Experience Manager (AEM) 6.5.20 and earlier and describes a DOM-based Cross-Site Scripting (XSS) flaw. The vulnerability allows an attacker to cause the victim’s browser to execute arbitrary JavaScript, with exploitation typically requiring user interaction (e.g., cli...

CVE-2024-36199

CVE-2024-36199 affects Adobe Experience Manager versions 6.5.20 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can let an attacker inject JavaScript, which would execute in a victim’s browser when they visit the affected page. The CVSSv3.1 base...

CVE-2024-36203

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields (CVE-2024-36203). An attacker could inject malicious JavaScript that executes in a victim’s browser when loading a page containing the vulnerable field. CVSS v3.1 base score 5.4 ...

CVE-2024-36204

CVE-2024-36204 refers to an stored XSS in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. Public records in the CVE describe that malicious scripts can be injected into vulnerable form fields and executed in the victim’s browser when loading the page with the tainted field. Connected ...

CVE-2024-36232

CVE-2024-36232 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, due to a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows injected JavaScript to execute in a victim’s browser when loading pages containing the affected fields (standal...

CVE-2024-52842

CVE-2024-52842 affects Adobe Experience Manager (AEM)

CVE-2024-53963

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability that can let a low-privilege attacker execute arbitrary code in the victim’s browser. Exploitation requires user interaction via a manipulated URL/input; the issue arises from DOM handling and...

CVE-2025-46879

CVE-2025-46879 affects Adobe Experience Manager versions 6.5.22 and earlier with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. The vulnerability can be exploited by a low-privilege attacker and user interaction is required to trigger, potentially allowing malicious JavaScrip...

CVE-2025-46887

Adobe Experience Manager (AEM) up to 6.5.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious JavaScript, executing in a victim’s browser. The issue is documented as CVE-2025-46887. The advisor...

CVE-2025-46889

Adobe Experience Manager (AEM)

CVE-2025-46982

CVE-2025-46982 – Adobe Experience Manager (AEM) : A stored XSS vulnerability affects AEM versions 6.5.22 and earlier. The issue allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when the page is loaded. The CVSS 3....

CVE-2025-47042

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, potentially resulting in JavaScript execution in a victim’s browser when visiting the affected page. The issue is document...

CVE-2024-26071

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-36167

CVE-2024-36167 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS (CWE-79) in vulnerable form fields. Malicious JavaScript could run in a victim’s browser when loading the affected page. The CVSSv3.1 base score is 5.4 (Medium) with user interaction required for exploitati...

CVE-2024-36195

CVE-2024-36195 affects Adobe Experience Manager 6.5.20 and earlier with a stored XSS in vulnerable form fields. The stored payload can execute JavaScript in a victim’s browser when visiting the page containing the field (per NVD description). CVSS 3.1 base score is 5.4 (Medium) with network attac...

CVE-2024-41875

CVE-2024-41875 affects Adobe Experience Manager versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing the field. Pu...

CVE-2024-52827

Adobe Experience Manager (AEM) 6.5.21 and earlier contains a stored XSS vulnerability in vulnerable form fields that could allow an attacker to inject malicious JavaScript and cause it to execute in a victim’s browser. Affected versions are explicitly listed as 6.5.21 and earlier; remediation is ...

CVE-2024-52848

CVE-2024-52848 describes a stored XSS vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue involves vulnerable form fields that can be exploited to inject malicious JavaScript, which may execute in a victim’s browser when visiting the affected page. The connected...

CVE-2025-46848

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields (CVE-2025-46848). The issue allows a low-privileged attacker to inject malicious scripts, which may execute in a user’s browser when visiting a page containing the affected field....

CVE-2025-46900

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a pa...

CVE-2025-46964

CVE-2025-46964 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The vulnerability is described in sources as a stored XSS flaw in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with malicious JavaScript potentially executed in a victim’s b...