Skip to content
OpenAdvisories
Medium WID-SEC-2025-2011 7 CVEs

Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Sep 9, 2025 · Updated Sep 9, 2025 · de-DE

Vendor: Adobe Product: Experience Manager Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Adobe Experience Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen und so vertrauliche Informationen offenzulegen.

Product

Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 7

  • High 7.7
    CVE-2025-54248

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain …

    Adobe Adobe Experience Manager
  • Medium 6.5
    CVE-2025-54246

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain un…

    Adobe Adobe Experience Manager
  • Medium 6.5
    CVE-2025-54247

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain …

    Adobe Adobe Experience Manager
  • Medium 6.5
    CVE-2025-54249 Scanner template

    Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side req…

    Adobe Adobe Experience Manager
  • Medium 5.4
    CVE-2025-54252

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This could result in bypassing …

    Adobe Adobe Experience Manager
  • Medium 4.9
    CVE-2025-54250

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain…

    Adobe Adobe Experience Manager
  • Medium 4.3
    CVE-2025-54251 Scanner template

    Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

    Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauth…

    Adobe Adobe Experience Manager

Revision history

  1. #1

    Initiale Fassung

References