Unrated severityNVD Advisory· Published Jul 8, 2025· Updated Feb 26, 2026
Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)
CVE-2025-49533
Description
Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.
Affected products
2- Range: <=6.5.23.0
- Adobe/Adobe Experience Manager (MS)v5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- helpx.adobe.com/security/products/aem-forms/apsb25-67.htmlmitrevendor-advisory
News mentions
0No linked articles in our index yet.