« Volver al listado

Adobe

Adobe Experience Manager Forms JEE: vulnerabilidades y CVE

Adobe Experience Manager Forms JEE tiene 6 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE6
Últimos 12 meses6
Críticas3
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-82000Crítica (9.6)0.73%—22 sept 2026
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated…
CVE-2026-81999Alta (8.7)0.81%—22 sept 2026
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain…
CVE-2026-81995Crítica (9.1)1.2%—22 sept 2026
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could…
CVE-2026-75745Crítica (10)1.2%—22 sept 2026
Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability…
CVE-2026-75744Alta (8.1)1.2%—22 sept 2026
Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious…
CVE-2026-75743Alta (7.1)1.5%—22 sept 2026
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1210 Exploitation of Remote Services3
  2. T1059 Command and Scripting Interpreter2
  3. T1059.007 JavaScript1
  4. T1090 Proxy1
  5. T1090.004 Domain Fronting1
  6. T1185 Browser Session Hijacking1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Adobe