Unrated severityNVD Advisory· Published Sep 9, 2025· Updated Sep 9, 2025
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2025-54249
Description
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.
Affected products
2- Range: <=6.5.23.0
- Adobe/Adobe Experience Managerv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- helpx.adobe.com/security/products/experience-manager/apsb25-90.htmlmitrevendor-advisory
News mentions
0No linked articles in our index yet.