VULNERABILITY INTELLIGENCE

CVE-2025-54253

CVSS score10 CRITICAL

EPSS probability88.77%

CISA KEVKnown exploited vulnerability

Published2025-08-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Adobe Experience Manager Forms Code Execution Vulnerability

Vendor / product: Adobe / Experience Manager (AEM) Forms

Description

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.

Weakness classification

psirt@adobe.com: CWE-863

Primary references

psirt@adobe.com — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, US Government Resource