CVE-2026-81999highCWE-918

CVE-2026-81999: fallo de gravedad alta en Adobe AEM 6.5 Forms JEE

Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear AEM 6.5 Forms JEE+ Monitorear AEM 6.5 LTS Forms JEE

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.8%
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Productos afectados
Adobe · AEM 6.5 Forms JEEAdobe · AEM 6.5 LTS Forms JEE
CVEs relacionadas — Adobe AEM 6.5 Forms JEE

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-75743HIGHAdobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)EPSS 1.5%CVE-2026-81995CRITICALAdobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)EPSS 1.2%CVE-2026-75744HIGHAdobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 1.2%CVE-2026-75745CRITICALAdobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)EPSS 1.2%CVE-2026-82000CRITICALAdobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.7%