WID-SEC-W-2025-2011

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

view advisory published 2025-09-09

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Adobe Experience Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen und so vertrauliche Informationen offenzulegen.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2025-54252US——
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2025-54251US——
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker coul…
CVE-2025-54250US——
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged…
CVE-2025-54249US——
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-priv…
CVE-2025-54248US——
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged a…
CVE-2025-54247US——
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged a…
CVE-2025-54246US—OT elevated—
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged att…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan