CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2025-5425310.0/CRITICALEPSS 80.8%CISA KEV

2025-08-05

Adobe Experience Manager (AEM) Forms Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-54253, CISA KEV Active Exploitation)

[Affected Scope] Adobe Experience Manager (AEM) versions 6.5.23 and earlier (specifically with Forms module and Struts DevMode enabled)

[Impact] Unauthenticated remote attackers can bypass security controls and execute arbitrary system commands or code with system privileges

[Mitigation] Apply the official Adobe APSB25-82 security patch immediately and disable Struts DevMode in production environments