Skip to content
OpenAdvisories
High WID-SEC-2025-1503 3 CVEs

Adobe Experience Manager Forms und Adobe Experience Manager Screens: Mehrere Schwachstellen

Published Jul 8, 2025 · Updated Jul 8, 2025 · de-DE

Vendor: Adobe Product: Experience Manager Product: Experience Manager Forms Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Experience Manager Forms und Adobe Experience Manager Screens ausnutzen, um beliebigen Programmcode auszuführen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

Adobe Experience Manager Forms ist eine Lösung zur Verwaltung von Formularen.
Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 3

  • Critical 9.8
    CVE-2025-49533 Scanner template EPSS 52%

    Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

    Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is un…

    Adobe Adobe Experience Manager (MS)
  • Medium 5.4
    CVE-2025-49534

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2025-49547

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager

Revision history

  1. #1

    Initiale Fassung

References