Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html | Vendor Advisory |
| https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms/ | Exploit Third Party Advisory |
Configurations
History
13 Aug 2025, 18:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:adobe:experience_manager_forms:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| References | () https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html - Vendor Advisory | |
| References | () https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms/ - Exploit, Third Party Advisory | |
| First Time |
Adobe
Adobe experience Manager Forms |
06 Aug 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| References |
|
|
| CWE |
05 Aug 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-05 17:15
Updated : 2025-08-13 18:56
NVD link : CVE-2025-54253
Mitre link : CVE-2025-54253
JSON object : View
Products Affected
adobe
- experience_manager_forms
CWE