Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: Adobe AEM 6.5 Forms JEE, AEM 6.5 LTS Forms JEE — helpx.adobe.com/security/products/aem-forms/apsb26-151.html Clear all filters
TI-2026-53026 CVE-2026-75745 · GHSA-cwmg-h2cg-fq6p

Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)

Priority MEDIUM 51

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01166 Published 2026-09-22 Fixed in 6.5.25 (AEMForms-6.5.0-0134 Hotfix), 6.5 LTS SP3 CWE-863
TI-2026-53025 CVE-2026-75744 · GHSA-qcj3-f69q-4wv6

Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)

Priority MEDIUM 40

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.01175 Published 2026-09-22 Fixed in 6.5.25 (AEMForms-6.5.0-0134 Hotfix), 6.5 LTS SP3 CWE-79
TI-2026-56589 CVE-2026-81995 · GHSA-m686-ggv2-x2m9

Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

Priority MEDIUM 44

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01239 Published 2026-09-22 Fixed in 6.5.25 (AEMForms-6.5.0-0134 Hotfix), 6.5 LTS SP3 CWE-20