Advisories · Technology

Adobe AEM 6.5 Forms JEE.

Every CVE that names Adobe AEM 6.5 Forms JEE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75743 CVE record

CVSS 7.1 High

Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Cross-site request forgery (CSRF)
Not analysed yet 22 Sept 2026
CVE-2026-75745 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-82000 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026
CVE-2026-75744 CVE record

CVSS 8.1 High

Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-81995 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- CWE-20
Not analysed yet 22 Sept 2026
CVE-2026-81999 CVE record

CVSS 8.7 High

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026