CVE
CVE-2025-54249
6.5
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
adobe experience manager
Updated Nov 7, 2026View on NVD →
This CVE is in S4E's catalog, but no public scanner is mapped to it yet.
CVE history: adobe experience manager
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →