Product:
Adobe Experience Manager
Summary
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2025-54250 |
Exploitation
To exploit this vulnerability, an attacker with high privileges can send specially crafted input to the affected system. By manipulating the input validation process, the attacker can bypass security controls and gain unauthorized write access to sensitive areas of the application.
Affected Products
- Adobe Experience Manager 6.5.23.0 and earlier: Vulnerable to improper input validation leading to security feature bypass.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Adobe Experience Manager that addresses this issue. Additionally, implementing strict input validation and monitoring for unauthorized access attempts can help reduce the risk.