CVE-2025-47063

CVE-2025-47063 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields that could let a low-privileged attacker inject JavaScript executed in a victim’s browser. The connected Red Hat and security advisories corroborate the affected version range and XSS f...

CVE-2025-47070

CVE-2025-47070 affects Adobe Experience Manager up to version 6.5.22. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser when browsing the affected page. ...

CVE-2024-26071

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-36159

CVE-2024-36159 affects Adobe Experience Manager 6.5.20 and earlier. It describes a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling an attacker to inject JavaScript that could execute in a victim’s browser when visiting the page containing the field. Mitigation:...

CVE-2024-36167

CVE-2024-36167 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS (CWE-79) in vulnerable form fields. Malicious JavaScript could run in a victim’s browser when loading the affected page. The CVSSv3.1 base score is 5.4 (Medium) with user interaction required for exploitati...

CVE-2024-36213

CVE-2024-36213 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The vulnerability is a stored cross-site scripting (XSS) flaw in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field...

CVE-2024-41844

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling malicious scripts to execute in a user’s browser. The CVE-2024-41844 entry specifies the issue and its impact; a CVSSv3.1 base score of 5.4 (Medi...

CVE-2024-41845

CVE-2024-41845 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, which are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The public description states malicious JavaScript can be executed in a victim’s browser when visiting a page cont...

CVE-2024-41875

CVE-2024-41875 affects Adobe Experience Manager versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing the field. Pu...

CVE-2024-43745

CVE-2024-43745 is a reflected Cross‑Site Scripting (XSS) vulnerability affecting Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue allows an attacker to persuade a user to visit a crafted URL, potentially causing malicious JavaScript to execute in the victim’s browser. Connected source...

CVE-2024-52848

CVE-2024-52848 describes a stored XSS vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue involves vulnerable form fields that can be exploited to inject malicious JavaScript, which may execute in a victim’s browser when visiting the affected page. The connected...

CVE-2025-46848

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields (CVE-2025-46848). The issue allows a low-privileged attacker to inject malicious scripts, which may execute in a user’s browser when visiting a page containing the affected field....

CVE-2025-46900

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a pa...

CVE-2025-46946

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the field. Remediation per APSB25-48 is to apply Adobe’...

CVE-2025-46990

Adobe Experience Manager 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker with user interaction could inject malicious JavaScript that executes in a victim’s browser. The issue is documented across multiple feeds (CVE-2025-46990) wit...

CVE-2025-47026

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which may execute in a victim’s browser when visiting a page containin...

CVE-2025-47055

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that may execute in a victim’s browser when visiting a page containing the field. The CVE is documente...

CVE-2024-36161

Adobe Experience Manager 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-36161) in vulnerable form fields. The issue allows injection of malicious JavaScript that can execute in the victim’s browser when visiting a page containing the affected field....

CVE-2024-36174

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-injected JavaScript to run in a victim’s browser when visiting the page containing the field. The CVSS 3.1BaseScore is 5.4 (Medium) with...

CVE-2024-36205

CVE-2024-36205 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable field. The AV is netwo...

CVE-2024-36214

CVE-2024-36214 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a stored XSS in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when visiting a page containing the vulnerable field. CVSS 3.1 base score: 5.4 (Medium). The linked ...

CVE-2024-41848

CVE-2024-41848 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, exposing a reflected XSS vulnerability invoked when a user visits a crafted URL reference. The issue is characterized as a reflected Cross-Site Scripting (XSS) in AEM, with the CVSS 3.1 vector indicating Network access, low...

CVE-2024-43743

CVE-2024-43743 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw, arising from insufficient protection of the web page structure that can allow an attacker to inject malicious scripts into vulnerable form fields, leading to ma...

CVE-2024-52816

CVE-2024-52816 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue is a stored XSS vulnerability that allows an attacker to inject malicious scripts into vulnerable form fields, executing in a victim’s browser when visiting the page containing the vulnerable field. Affected produ...

CVE-2024-52817

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied JavaScript to execute in a victim’s browser when visiting the page containing the field. This CVE (CVE-2024-52817) is ...

CVE-2024-52853

CVE-2024-52853 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. An attacker could inject malicious scripts executed in a victims browser when accessing the affected page. Remediation visible in advisory APSB24-69; update to 6.5.22 or ...

CVE-2025-46857

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker can lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. CVSSv3.1: 5.4 (Medium) with networ...

CVE-2025-46891

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can execute in a victim’s browser when visiting a page containing the vul...

CVE-2025-46986

CVE-2025-46986 affects Adobe Experience Manager (AEM) 6.5.22 and earlier with a stored XSS in vulnerable form fields. The vulnerability allows a low-privileged attacker, via a page containing the vulnerable field, to inject and execute malicious JavaScript in a victim’s browser. CVSS 3.1 base sco...

CVE-2025-46988

CVE-2025-46988 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting a page containing the v...

CVE-2025-47013

CVE-2025-47013 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier, affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser w...

CVE-2025-47039

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript and have it execute in a victim’s browser when visiting the page containing the field. A...

CVE-2025-47057

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored XSS vulnerability (CVE-2025-47057). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2025-47071

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored cross-site scripting (XSS) vulnerability in vulnerable form fields. Root cause: improper input handling allows injected JavaScript to execute in a victim’s browser when loading the page containing the vulnerable field. Impa...

CVE-2023-51457

Adobe Experience Manager (AEM) prior to 6.5.19.0 contains a stored XSS vulnerability in form fields due to insufficient filtering/escaping of user input. A low-privilege attacker could inject malicious script, which would execute in a victim’s browser when accessing the vulnerable page. Affected:...

CVE-2024-26115

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability. The issue occurs when a victim visits a specially crafted URL referencing a vulnerable page, allowing malicious JavaScript to execute in the victim’s browser context. I...

CVE-2024-36142

CVE-2024-36142 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS in vulnerable form fields. The issue allows an attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting a page containing the vulnerable field. The CVSS v3.1 vector indic...

CVE-2024-36147

Affected product: Adobe Experience Manager (AEM) 6.5.20 and earlier. Vulnerability type: stored Cross-Site Scripting (XSS) in vulnerable form fields. Root cause / description: attacker can inject malicious scripts into inputs in pages containing the vulnerable field, leading to execution of JavaS...

CVE-2024-36196

Adobe Experience Manager is affected in versions 6.5.20 and earlier by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-supplied script to run in a victim’s browser when visiting the page containing the input. The issue arises from the stored XSS flaw...

CVE-2024-36202

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when visiting pages with the crafted payload. The CVE is CVE-2024-36202 (CWE-79) with a CV...

CVE-2024-43718

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-43718). Malicious JavaScript can execute in a user’s browser when they load a page containing a vulnerable form field. The issue is addressed by the APSB24-69 update; upgr...

CVE-2024-52826

CVE-2024-52826: A stored XSS in Adobe Experience Manager (AEM) affects versions up to 6.5.21 and earlier. The vulnerability arises from insecure handling of form field input, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the vulnerab...

CVE-2025-46841

CVE-2025-46841 concerns Adobe Experience Manager (AEM) 6.5.22 and earlier, which are affected by a stored Cross-Site Scripting (XSS) vulnerability. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing w...

CVE-2025-46850

CVE-2025-46850 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when visiting the page containing the field. Adobe-aware advisories (APSB25-48) indicate ...

CVE-2025-46861

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, with execution in a victim’s browser when visiting a page containing the field. Remediation is provided by Adobe APSB25-48 se...

CVE-2025-46866

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which may execute in a victim’s browser when they visit the affected page and interact with the...

CVE-2025-46880

CVE-2025-46880 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when visiting the affec...

CVE-2025-46883

CVE-2025-46883 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim’s browser when visiting the affecte...

CVE-2025-46895

CVE-2025-46895 : Adobe Experience Manager (AEM) 6.5.22 and earlier contains a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which are executed in a victim’s browser when visiting the affected page. The linked d...

CVE-2025-46908

CVE-2025-46908 affects Adobe Experience Manager 6.5.22 and earlier. The issue is a stored XSS in vulnerable form fields, exploitable by a low-privileged attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the affected page. The CVE is documented with a stored XSS...