adobe-aem-forms-jee-hotfix-6.5.23.0-win-jboss.zip patch issues
Hello,
I'm trying to remediate security vulnerabilities in our AEM installation. I have downloaded the adobe-aem-forms-jee-hotfix-6.5.23.0-win-jboss.zip file, and extracted it, and I'm running the aemforms65_cfp_install.exe file in the Disk1/InstData/VM folder. The patch kicks off, executes, and succeeds. I then run configuration manager. The first issue I faced was that I had to copy the commons-io-2.5.jar file from the \Adobe_Experience_Manager_Forms\sdk\client-libs\thirdparty folder to the configuration manager lib directory. That got me past my first issue, which was: java.lang.NoClassDefFoundError: org/apache/commons/io/FileUtils. Now that I've moved past that, I'm getting this error:
[2025-07-15 11:11:24,100], SEVERE, Thread-6, com.adobe.livecycle.lcm.feature.configureLC.MergeEarsTask, Task failed
com.adobe.livecycle.lcm.core.LCMException[ALC-LCM-010-200]: Failed to merge Ears.
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars.mergeEars(MergeEars.java:221)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars.mergeEars(MergeEars.java:151)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars.mergeAllEars(MergeEars.java:94)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEarsTask$ActualTask.<init>(MergeEarsTask.java:74)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEarsTask$1.construct(MergeEarsTask.java:52)
at com.adobe.livecycle.lcm.core.tasks.SwingWorker$2.run(SwingWorker.java:114)
at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.NoClassDefFoundError: org/apache/xpath/XPathAPI
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars2.mergeAppXML(MergeEars2.java:778)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars2.mergeEar(MergeEars2.java:280)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars2.mergeEars(MergeEars2.java:228)
at com.adobe.livecycle.lcm.feature.configureLC.MergeEars.mergeEars(MergeEars.java:210)
... 6 more
Caused by: java.lang.ClassNotFoundException: org.apache.xpath.XPathAPI
at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 10 more
xalan-2.7.2.jar is present in the Adobe\Adobe_Experience_Manager_Forms\configurationManager\lib directory, and I confirmed that this jar contains org.apache.xpath.XPathAPI.class. I was unable to find anyone else having this specific classloader issue. Any advice will be appreciated.
Thanks!