VDB
CVE-2025-64557
CVE-2025-64557
PUBLISHED
CVSS 5.400000095367432 MEDIUM
Adobe has released updates for Adobe Experience Manager (AEM). These updates resolve vulnerabilities rated critical and important. Successful exploitation of these vulnerabilities could result in arbitrary code execution, arbitrary file system read, and priviledge escalation. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Vulnerability: Cross-site Scripting (Stored XSS) (CWE-79) Impact: Arbitrary code execution Severity: Important CVSS: 5.4 CWE: CWE-79
EPSS 0.25% · 15.4th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.25%
15.4th percentile
Timeline
- Dec 9, 2025 CVE Published
- Dec 11, 2025 EPSS Score
- Dec 16, 2025 EPSS Score
- Dec 20, 2025 EPSS Score
- Dec 25, 2025 EPSS Score
- Dec 29, 2025 EPSS Score
- Jan 3, 2026 EPSS Score
- Jan 8, 2026 EPSS Score
- Jan 12, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 22, 2026 EPSS Score
- Jan 26, 2026 EPSS Score