Improper Input Validation in Adobe Experience Manager
CVE-2025-54247

6.5MEDIUM

Key Information:

Vendor

Adobe
Status
Adobe Experience Manager
Vendor
CVE Published:
9 September 2025

What is CVE-2025-54247?

Adobe Experience Manager versions 6.5.23.0 and earlier suffer from an Improper Input Validation vulnerability that enables a low-privileged attacker to circumvent security controls. This flaw could potentially allow unauthorized read access, thereby compromising data security and system integrity. It is imperative for organizations using affected versions to implement the necessary patches or updates to mitigate this risk.

Affected Version(s)

Adobe Experience Manager 0 <= 6.5.23.0

References

https://helpx.adobe.com/security/products/experience-mana...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54247 : Improper Input Validation in Adobe Experience Manager