CVE-2019-8089: Adobe Experience Manager Forms

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Affected products

• Adobe Experience Manager Forms: version 6.3 only; version 6.4 only; version 6.5 only

Published 2019-10-22. Last modified 2026-06-17.