CVE-2025-54249

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@adobe.com

Published

2025-09-09

Last modified

2025-09-09

Weaknesses

CWE-918

Affected products

• Adobe Experience Manager (Adobe)
• Experience Manager (Adobe)

References

• https://helpx.adobe.com/security/products/experience-manager/apsb25-90.html