Experience Manager Forms (Adobe) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2025-08-05. Vendor: Adobe.
CVEs of Experience Manager Forms
- CVE-2025-54254 - CVSS 8.6 (high), 2025-08-05: Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could…
- CVE-2025-54253 - CVSS 10 (critical), 2025-08-05: Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An…
- CVE-2020-9733 - CVSS 7.5 (high), 2020-09-10: An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited,…
- CVE-2020-9732 - CVSS 9 (critical), 2020-09-10: The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author'…
- CVE-2019-8089 - CVSS 6.1 (medium), 2019-10-22: Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive…
- CVE-2019-7129 - CVSS 6.1 (medium), 2019-05-29: Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive…
- CVE-2017-3067 - CVSS 7.5 (high), 2017-05-09: Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM…
- CVE-2016-6934 - CVSS 6.1 (medium), 2016-12-15: Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be…
