Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-54251

Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

Description

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager

Default version status: affected

  • 0 to ≤ 6.5.23.0affected

References