Unrated severityNVD Advisory· Published Sep 9, 2025· Updated Sep 30, 2025
Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
CVE-2025-54251
Description
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access.
Affected products
2- Range: <=6.5.23.0
- Adobe/Adobe Experience Managerv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- helpx.adobe.com/security/products/experience-manager/apsb25-90.htmlmitrevendor-advisory
News mentions
0No linked articles in our index yet.