Exploit for Incorrect Authorization in Adobe Experience_Manager_Forms

🗓️ 04 Nov 2025 09:29:14Reported by AdityaBhatt3010Type

githubexploit

githubexploit🔗 github.com👁 320 Views

Unauthenticated RCE in AEM Forms on JEE up to 6.5.23.0 via OGNL/Struts; XXE enables file reads.

Reporter	Title	Published	Views	Family All 38
GithubExploit	Exploit for Incorrect Authorization in Adobe Experience_Manager_Forms	1 Dec 202512:36	–	githubexploit
GithubExploit	Exploit for CVE-2025-54253	6 Aug 202519:28	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Adobe Experience_Manager_Forms	10 Feb 202620:10	–	githubexploit
GithubExploit	Exploit for CVE-2025-54253	6 Aug 202510:37	–	githubexploit
GithubExploit	Exploit for CVE-2025-54253	17 Aug 202522:04	–	githubexploit
Tenable Nessus	Adobe Experience Manager 6.0.0.0 < 6.5.24.0 Multiple Vulnerabilities (APSB25-82)	6 Aug 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Adobe Experience Manager content and media data management system, related to configuration errors, allows a hacker to bypass existing security restrictions and execute arbitrary code.	6 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager (AEM) Forms on JEE lies in the incorrect restrictions on XML links to external objects. This allows attackers to read arbitrary files.	8 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-54253	5 Aug 202520:41	–	circl
Circl	CVE-2025-54254	6 Aug 202507:47	–	circl

04 Nov 2025 09:34Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.6 - 10

EPSS0.87515

SSVC

cve-2025-54253 remote code execution file reads adobe forms vulnerability