Vulnerability Description
Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Experience Manager | <= 6.5.24.0 |
| Apple | Iphone Os | - |
| Apple | Macos | - |
| Android | - | |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-34694?
CVE-2026-34694 is a vulnerability with a CVSS score of 4.8 (MEDIUM). Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject...
How severe is CVE-2026-34694?
CVE-2026-34694 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-34694?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Experience Manager, Apple Iphone Os, Apple Macos, Google Android, Linux Linux Kernel.