CVE-2026-34694

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE versions LTS SP1 Adobe Experience Manager Forms JEE versions prior to 6.5.24.0

Description A stored Cross-Site Scripting (XSS) issue allows a high-privileged attacker to inject malicious scripts into vulnerable form fields. This can result in the execution of malicious JavaScript in a victim's browser when they visit the page containing the affected field.

Recommendations Update Adobe Experience Manager Forms JEE LTS SP1 to a version containing the fix. Update Adobe Experience Manager Forms JEE to a version later than 6.5.24.0.