GCVE-VVD-NCSC-2025-241

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published August 6, 2025

Adobe Experience Manager versions 6.5.23 and earlier, along with Adobe Experience Manager Forms in JEE, have vulnerabilities allowing arbitrary code execution due to misconfigurations and unspecified issues.

Download JSON Open in Console

Weaknesses (CWE)

CWE-863Incorrect AuthorizationCWE-611Improper Restriction of XML External Entity Reference

Risk Scores

CVSS 3.1

10.0/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Adobe	vers:unknown/*	—	—

Aliases

CVE-2025-54253 CVE-2025-54254

Transitive aliases

BDU:2025-09420 VVD-CESS-2025-54253 CNVD-2025-21173 GHSA-6hv6-fgh2-5mjv WID-SEC-W-2025-1720 NCSC-2025-0241 BDU:2025-09480 VVD-CESS-2025-54254 CNVD-2025-21172 EUVD-2025-23638 GHSA-7mcc-8f7p-x6v7

References

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON