CVE-2026-81995criticalCWE-20

CVE-2026-81995: fallo crítico en Adobe AEM 6.5 Forms JEE

Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear AEM 6.5 Forms JEE+ Monitorear AEM 6.5 LTS Forms JEE

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 1.2%
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Adobe · AEM 6.5 Forms JEEAdobe · AEM 6.5 LTS Forms JEE
CVEs relacionadas — Adobe AEM 6.5 Forms JEE

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-75743HIGHAdobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)EPSS 1.5%CVE-2026-75744HIGHAdobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 1.2%CVE-2026-75745CRITICALAdobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)EPSS 1.2%CVE-2026-81999HIGHAdobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.8%CVE-2026-82000CRITICALAdobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.7%