Advisories · Technology

Adobe AEM 6.5 LTS Forms JEE.

Every CVE that names Adobe AEM 6.5 LTS Forms JEE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75743 CVE record

CVSS 7.1 High

Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Cross-site request forgery (CSRF)
Not analysed yet 22 Sept 2026
CVE-2026-75745 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-82000 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026
CVE-2026-75744 CVE record

CVSS 8.1 High

Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2026
CVE-2026-81995 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- CWE-20
Not analysed yet 22 Sept 2026
CVE-2026-81999 CVE record

CVSS 8.7 High

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe AEM 6.5 Forms JEE
- Adobe AEM 6.5 LTS Forms JEE
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026