{"id":"CVE-2025-54253","kind":"vulnerability","aliases":["CVE-2025-54253"],"related":[],"title":"adobe experience manager forms: Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could…","description":"Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.","summary":"Adobe Experience Manager Forms (JEE edition) has an unspecified flaw that allows arbitrary code execution. CISA lists it as actively exploited in the wild.","severity":"critical","cvss":10.0,"epss":null,"exploited":true,"exploited_at":"2025-10-15T00:00:00+00:00","products":[{"name":"Adobe Experience Manager (AEM) Forms","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"adobe experience manager forms","fixed":[],"affected":"<= 6.5.23.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe-experience-manager","aem-forms","exploited","java","vendor"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the mitigations per Adobe's vendor instructions, or discontinue use of the product if mitigations are unavailable (per CISA required action).","status":"open","published_at":"2025-08-05T17:15:29+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:44:31+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:44:31Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigations per Adobe's vendor instructions, or discontinue use of the product if mitigations are unavailable (per CISA required action).","reach":"unknown","summary":"Adobe Experience Manager Forms (JEE edition) has an unspecified flaw that allows arbitrary code execution. CISA lists it as actively exploited in the wild.","category":"vendor","who_cares":["adobe-experience-manager","aem-forms","java"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs arbitrary code on the AEM Forms server.","analyst_note":"Find Adobe's security bulletin for CVE-2025-54253 to get affected and fixed versions, required mitigations, and whether it is network-reachable without auth.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000426,"input_tokens":2541,"output_tokens":344,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2025':21A,24A '-54253':22A,25A '6.5.23':9A,73C 'activ':64B 'adob':1A,5A,36B,45B,69C 'adobe':26A,31A 'adobe-experience-manag':35B 'aem':29A,40B 'aem-form':39B 'affect':13A,77C 'allow':56B 'arbitrari':57B,86C 'attack':90C 'bypass':96C 'chang':114C 'cisa':60B 'code':58B,87C,101C 'could':19A,83C,91C 'cve':20A,23A 'earlier':11A,75C 'edit':50B 'execut':59B,88C,100C 'experi':2A,6A,37B,46B,70C 'experience':27A,32A 'exploit':42B,65B,102C 'flaw':54B 'form':4A,41B,48B 'forms':30A,34A 'interact':110C 'issu':105C 'java':43B 'jee':49B 'leverag':92C 'list':61B 'manag':3A,7A,38B,47B,71C 'manager':28A,33A 'mechan':98C 'misconfigur':16A,80C 'requir':108C 'result':84C 'scope':112C 'secur':97C 'unspecifi':53B 'user':109C 'vendor':44B 'version':8A,72C 'vulner':17A,81C,94C 'wild':68B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-08-05T17:15:29+00:00","kev":{"dateAdded":"2025-10-15","dueDate":"2025-11-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-54253","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-54253","severity":null,"published_at":"2025-10-15T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T10:39:04+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-54253","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54253","severity":null,"published_at":"2025-08-05T17:15:29+00:00","modified_at":"2026-06-17T09:39:43+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}