WID-SEC-W-2026-3510

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Adobe Experience Manager Forms: Mehrere Schwachstellen

view advisory published 2026-09-22

Ein Angreifer kann mehrere Schwachstellen in Adobe Experience Manager Forms ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und Cross-Site-Scripting-Angriffe (XSS) durchzuführen.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-82000UScritical9.6—
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could expl…
CVE-2026-81999UShigh8.7—
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges cou…
CVE-2026-81995UScritical9.1—
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An at…
CVE-2026-75745UScritical10.0OT elevated—
Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An atta…
CVE-2026-75744UShigh8.1—
Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts i…
CVE-2026-75743UShigh7.1—
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan