What’s Vulnerable › Products

Adobe Experience Manager Forms vulnerabilities

8 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Adobe Experience Manager Forms version is affected

Exploited Adobe Experience Manager Forms vulnerabilities

• CVE-2025-54253 — Adobe Experience Manager Forms Code Execution Vulnerability

Latest Adobe Experience Manager Forms vulnerabilities

• CVE-2025-54254 — Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 8.6)
• CVE-2025-54253 — Adobe Experience Manager Forms Code Execution Vulnerability (CVSS 10.0) — exploited
• CVE-2020-9733 — Sensitive information disclosure possible in AEM (CVSS 7.5)
• CVE-2020-9732 — Stored XSS in AEM Sites Components (CVSS 9.0)
• CVE-2019-8089 — (CVSS 6.1)
• CVE-2019-7129 — (CVSS 6.1)
• CVE-2017-3067 — (CVSS 7.5)
• CVE-2016-6934 — (CVSS 6.1)