CVE-2025-54247
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-09-12
Assigner: Adobe Systems Incorporated
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| adobe | experience_manager | to 6.5.23.0 (inc) |
| adobe | experience_manager | to 2025.8.0 (inc) |
| adobe | experience_manager | 6.5 |
| adobe | experience_manager | 6.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Input Validation issue in Adobe Experience Manager versions 6.5.23.0 and earlier. It allows a low-privileged attacker to bypass security features by exploiting insufficient validation of input, potentially gaining unauthorized read access to sensitive information.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing an attacker with low privileges to bypass security controls and gain unauthorized read access to data, which could lead to exposure of sensitive information without altering or disrupting system availability.