Improper Input Validation in Adobe Experience Manager Affects User Security

CVE-2025-47096

What is CVE-2025-47096?

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to an improper input validation vulnerability, which could allow an attacker to execute arbitrary code within the context of the current user. This vulnerability necessitates user interaction, as the victim must open a specially crafted malicious file for exploitation to occur. While low privileges are required for the attacker to exploit the flaw, the potential risk to user security is significant.

References