CVE-2026-81999
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AEM 6.5 Forms JEE
- Vendor
- Adobe
- Product
- AEM 6.5 Forms JEE
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | Unavailable | 6.5.25 | None listed |
| 6.5.25 (AEMForms-6.5.0-0134 Hotfix) | unaffected | custom | Unavailable | Unavailable | None listed |
AEM 6.5 LTS Forms JEE
- Vendor
- Adobe
- Product
- AEM 6.5 LTS Forms JEE
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | Unavailable | 6.5 LTS SP2 | None listed |
| 6.5 LTS SP3 | unaffected | custom | Unavailable | Unavailable | None listed |