Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-54249

Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

Description

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager

Default version status: affected

  • 0 to ≤ 6.5.23.0affected

References