EUVD-2026-84788
GHSA-99hr-pvhp-jhhq
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
PR:H per Adobe's 'high privileges' statement; AV:N/S:C for network SSRF reaching internal resources; C:H for internal disclosure but I:L (SSRF-driven access, limited integrity) and A:N.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
AnalysisAI
Server-side request forgery in Adobe Experience Manager Forms JEE lets an attacker who already holds high-privileged, admin-level application access coerce the AEM Forms JEE server into issuing requests to internal-only resources, achieving privilege escalation and a scope change beyond the original AEM security perimeter. Affected deployments are AEM 6.5 Forms JEE and AEM 6.5 LTS Forms JEE, reachable over the network (AV:N) with no end-user interaction (UI:N) but gated behind the PR:H privileged-authentication requirement, so practical risk concentrates on malicious insiders or attackers who have already compromised an administrative account. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an attacker who already holds HIGH privileges (PR:H) within Adobe Experience Manager Forms JEE - i.e. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N, base 8.7 HIGH) describes a network-reachable SSRF that requires HIGH privileges (PR:H) and no user interaction, with a scope change reflecting the SSRF pivot from the AEM Forms JEE server into otherwise-unreachable internal resources. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fixed build published in Adobe security advisory APSB-26-151 (https://helpx.adobe.com/security/products/aem-forms/apsb26-151.html) for both AEM 6.5 Forms JEE and AEM 6.5 LTS Forms JEE; the supplied intelligence does not include an explicit fix version string, so confirm the exact hotfix or service-pack number in the advisory before scheduling the change, and note that Adobe hotfixes for AEM Forms JEE typically require an application-server restart and a short maintenance window. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all instances of Adobe Experience Manager Forms JEE on AEM 6.5 and AEM 6.5 LTS, and restrict network access to their administrative interfaces to only trusted management networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Aem 6 5 Forms Jee
View allIncorrect authorization in Adobe Experience Manager Forms JEE (the 6.5 and 6.5 LTS branches) allows a remote, unauthenti
Server-side request forgery in Adobe Experience Manager (AEM) 6.5 Forms JEE and AEM 6.5 LTS Forms JEE lets an authentica
Arbitrary code execution is possible in Adobe Experience Manager 6.5 Forms JEE and AEM 6.5 LTS Forms JEE via an improper
Stored cross-site scripting in Adobe Experience Manager 6.5 Forms JEE and 6.5 LTS Forms JEE lets a high-privileged, auth
Cross-site request forgery in Adobe Experience Manager Forms JEE (AEM 6.5 and 6.5 LTS) lets an attacker forge requests t
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today