VDB
CVE-2025-64537
CVE-2025-64537
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Adobe has released updates for Adobe Experience Manager (AEM). These updates resolve vulnerabilities rated critical and important. Successful exploitation of these vulnerabilities could result in arbitrary code execution, arbitrary file system read, and priviledge escalation. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Cross-site Scripting (DOM-based XSS) (CWE-79) Impact: Arbitrary code execution Severity: Critical CVSS: 9.3 CWE: CWE-79
EPSS 0.74% · 53.1th percentile
Risk Scores
CVSS 3.1
9.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
EPSS Score
0.74%
53.1th percentile
Timeline
- Dec 9, 2025 CVE Published
- Dec 10, 2025 PoC Published
- Dec 11, 2025 EPSS Score
- Dec 13, 2025 PoC Published
- Dec 16, 2025 EPSS Score
- Dec 21, 2025 EPSS Score
- Dec 25, 2025 EPSS Score
- Dec 30, 2025 EPSS Score
- Jan 4, 2026 EPSS Score
- Jan 9, 2026 EPSS Score
- Jan 14, 2026 EPSS Score
- Jan 19, 2026 EPSS Score