CVE-2020-24444: Adobe Experience Manager Forms Add-On

Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days.

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability could be exploited by an unauthenticated attacker to gather information about internal systems that reside on the same network.

Affected products

• Adobe Experience Manager Forms Add-On: version 6.4.8.2 only; version 6.5.6.0 only

Published 2020-12-10. Last modified 2026-06-17.