Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-46840

Adobe Experience Manager | Improper Authorization (CWE-285)

Description

Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager

Default version status: affected

  • 0 to ≤ 6.5.22affected

References