Class familyAdobe · Experience Manager (AEM) Forms
Adobe Experience Manager incorrect authorization flaws, 2022–2026
8 Experience Manager (AEM) Forms CVEs with CWE-863 weaknesses, 19 Dec 2022 to 13 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
2023’23
2024’24
2 2025’25
5 2026’26
In CISA KEVNot in KEV
20221 CVE
20252 CVEs, 1 in KEV
20265 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-42351 | 19 Dec 2022 | AEM Incorrect Authorization Security feature bypass | Grouped by weakness | 15.5 |
| CVE-2025-54253KEV | 5 Aug 2025 | Adobe Experience Manager Forms Code Execution Vulnerability | Grouped by weakness | 70.0 |
| CVE-2025-54246 | 9 Sep 2025 | Adobe Experience Manager | Incorrect Authorization (CWE-863) | Grouped by weakness | 11.5 |
| CVE-2026-19232 | 8 Sep 2026 | Adobe Experience Manager | Incorrect Authorization (CWE-863) | Grouped by weakness | 19.5 |
| CVE-2026-48382 | 13 Oct 2026 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code… | Grouped by weakness | 21.6 |
| CVE-2026-48383 | 13 Oct 2026 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code… | Grouped by weakness | 21.6 |
| CVE-2026-75732 | 13 Oct 2026 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code… | Grouped by weakness | 19.8 |
| CVE-2026-90532 | 13 Oct 2026 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code… | Grouped by weakness | 20.6 |