CVE-2024-36193

Adobe Experience Manager (AEM)

CVE-2024-36199

CVE-2024-36199 affects Adobe Experience Manager versions 6.5.20 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can let an attacker inject JavaScript, which would execute in a victim’s browser when they visit the affected page. The CVSSv3.1 base...

CVE-2024-36202

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when visiting pages with the crafted payload. The CVE is CVE-2024-36202 (CWE-79) with a CV...

CVE-2024-36204

CVE-2024-36204 refers to an stored XSS in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. Public records in the CVE describe that malicious scripts can be injected into vulnerable form fields and executed in the victim’s browser when loading the page with the tainted field. Connected ...

CVE-2024-36205

CVE-2024-36205 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable field. The AV is netwo...

CVE-2024-43740

CVE-2024-43740 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue allows an attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when the page with the vulnerable fie...

CVE-2024-52822

CVE-2024-52822 affects Adobe Experience Manager 6.5.21 and earlier with a DOM-based XSS vulnerability. Exploitation requires user interaction (crafted URL/input); successful abuse could run arbitrary scripts in the victim’s browser. Remediation per connected sources: upgrade to AEM 6.5.22 or late...

CVE-2024-52836

CVE-2024-52836 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript that runs in a victim’s browser when visiting a page containing the affected field. Public de...

CVE-2024-52838

Summary: CVE-2024-52838 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, via a DOM-based Cross-Site Scripting (XSS) vulnerability that could let an attacker run arbitrary code in a victim’s browser. The flaw arises when data from a user-controllable source is used unsafely in the DOM, a...

CVE-2024-52846

CVE-2024-52846 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields that could inject malicious JavaScript into a victim’s browser. The issue is confirmed in multiple corroborating sources (NVD/NASA references and Adobe APSB24-69). R...

CVE-2025-46837

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, which then execute in the victim’s browser and may lead to session takeover. The vulnerability ...

CVE-2025-46979

CVE-2025-46979 is an in-scope vulnerability affecting Adobe Experience Manager versions 6.5.22 and earlier, described as a stored cross-site scripting (XSS) flaw. A low-privilege attacker can inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s br...

CVE-2025-46982

CVE-2025-46982 – Adobe Experience Manager (AEM) : A stored XSS vulnerability affects AEM versions 6.5.22 and earlier. The issue allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when the page is loaded. The CVSS 3....

CVE-2025-47014

Summary: CVE-2025-47014 affects Adobe Experience Manager (AEM) up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields that could allow a low-privileged attacker to inject JavaScript executed in a user’s browser. Affected software (from the provided sources)...

CVE-2025-47016

Technical details about CVE-2025-47016 are not provided in the connected documents. The available sources reiterate a stored XSS in Adobe Experience Manager 6.5.22 and earlier; monitor for updated advisories or patches.

CVE-2025-47037

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can execute in a victim’s browser when the page containing the vulnerable field is visited. The ...

CVE-2025-47076

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when visiting the affected page. CVE-2025-4...

CVE-2025-47117

CVE-2025-47117 relates to a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue affects vulnerable form fields where injected JavaScript can execute in a victim’s browser when accessing the affected page. The documented exploit ...

CVE-2023-51460

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could abuse this to inject malicious scripts, which execute in a victim’s browser when visiting the affected page. The CVE’s metrics indicate network-based a...

CVE-2024-26068

Adobe Experience Manager 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The underlying issue allows attacker‑supplied scripts to execute in a victim’s browser when visiting a page containing the vulnerable field. Exploitation requires user interaction and...

CVE-2024-26071

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-34119

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows injection of malicious JavaScript that can execute in a victim’s browser when the page containing the field is loaded or interac...

CVE-2024-36170

Adobe Experience Manager (AEM) up to version 6.5.20 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields due to improper input validation. The CVE-2024-36170 issue can allow an attacker to inject malicious JavaScript that executes in a user’s browser when vis...

CVE-2024-36201

Adobe Experience Manager 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow an attacker to inject and execute malicious JavaScript in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-36233

CVE-2024-36233 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, where a DOM-based Cross-Site Scripting (XSS) vulnerability exists. The flaw can let an attacker execute arbitrary JavaScript in the victim’s browser session, with exploitation typically requiring user interaction ...

CVE-2024-52837

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability caused by unsanitized DOM manipulation via crafted URLs or user input. Exploitation can lead to arbitrary code execution in the victim’s browser session and requires user interaction. Remediat...

CVE-2024-52843

CVE-2024-52843 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow injection of malicious JavaScript executed in a victim’s browser when accessing the affected page. Public references ...

CVE-2024-53963

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a DOM-based XSS vulnerability that can let a low-privilege attacker execute arbitrary code in the victim’s browser. Exploitation requires user interaction via a manipulated URL/input; the issue arises from DOM handling and...

CVE-2025-46871

Adobe Experience Manager 6.5.22 and earlier is affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. A low‑privileged attacker could inject malicious scripts, with JavaScript executed in the victim’s browser when visiting the vulnerable page; exploitation requir...

CVE-2025-47026

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containin...

CVE-2025-47029

CVE-2025-47029 affects Adobe Experience Manager (AEM) up to version 6.5.22. The vulnerability is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing a low-privileged attacker to inject JavaScript that runs in a victim’s browser when visiting a page containing the field. T...

CVE-2025-47070

CVE-2025-47070 affects Adobe Experience Manager up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when browsing the affected page. ...

CVE-2024-36161

Adobe Experience Manager 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-36161) in vulnerable form fields. The issue allows injection of malicious JavaScript that can execute in the victim’s browser when visiting a page containing the affected field....

CVE-2024-36168

CVE-2024-36168 (Adobe Experience Manager) affects AEM 6.5.20 and earlier, with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious JavaScript into input fields, which can be executed in a victim’s browser when vi...

CVE-2024-36203

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored XSS vulnerability in vulnerable form fields (CVE-2024-36203). An attacker could inject malicious JavaScript that executes in a victim’s browser when loading a page containing the vulnerable field. CVSS v3.1 base score 5.4 ...

CVE-2024-36232

CVE-2024-36232 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, due to a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows injected JavaScript to execute in a victim’s browser when loading pages containing the affected fields (standal...

CVE-2024-41845

CVE-2024-41845 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, which are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The public description states malicious JavaScript can be executed in a victim’s browser when visiting a page cont...

CVE-2024-41875

CVE-2024-41875 affects Adobe Experience Manager versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing the field. Pu...

CVE-2024-43727

CVE-2024-43727 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a stored Cross-Site Scripting (XSS) vulnerability that can inject malicious scripts into vulnerable form fields, causing Malicious JavaScript to execute in a user’s browser when visiting a page containing the vulnerable...

CVE-2024-52816

CVE-2024-52816 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue is a stored XSS vulnerability that allows an attacker to inject malicious scripts into vulnerable form fields, executing in a victim’s browser when visiting the page containing the vulnerable field. Affected produ...

CVE-2024-52842

CVE-2024-52842 affects Adobe Experience Manager (AEM)

CVE-2024-52853

CVE-2024-52853 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. An attacker could inject malicious scripts executed in a victims browser when accessing the affected page. Remediation visible in advisory APSB24-69; update to 6.5.22 or ...

CVE-2025-46850

CVE-2025-46850 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when visiting the page containing the field. Adobe-aware advisories (APSB25-48) indicate ...

CVE-2025-46887

Adobe Experience Manager (AEM) up to 6.5.22 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious JavaScript, executing in a victim’s browser. The issue is documented as CVE-2025-46887. The advisor...

CVE-2025-46898

Adobe Experience Manager up to version 6.5.22 is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which may be executed in a victim’s browser when visiting a page containing the vulnerable field. Remediation: apply the securi...

CVE-2025-46933

CVE-2025-46933 affects Adobe Experience Manager up to version 6.5.22. It is a stored XSS in vulnerable form fields, exploitable by a low-privileged attacker to inject JavaScript that runs in a victim’s browser. Affected product: AEM; affected version: 6.5.22 and earlier. Root cause: stored Cross-...

CVE-2025-47042

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts, potentially resulting in JavaScript execution in a victim’s browser when visiting the affected page. The issue is document...

CVE-2025-47073

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject and execute malicious JavaScript in a victim’s browser. The issue is described across multiple sources...

CVE-2025-47084

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containing the vuln...

CVE-2024-36166

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious scripts that can run in a victim’s browser when visiting a page containing the vulnerable fiel...