CVE-2025-54250 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

CVE-2025-54246 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

CVE-2025-54246

Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier are affected by CVE-2025-54246, an Incorrect Authorization vulnerability that could bypass security features and allow unauthorized write access. A low-privileged, network-attacker could exploit this with no user interaction; the impact...

CVE-2025-54247

CVE-2025-54247 affects Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier. The issue is improper input validation that can cause a security feature bypass, allowing a low-privileged attacker to read data unauthorizedly. Several connected sources confirm the vulnerability and its impact,...

CVE-2025-54248

CVE-2025-54248 affects Adobe Experience Manager 6.5.23.0 and earlier, where an Improper Input Validation vulnerability could allow a low-privileged attacker to bypass security measures and gain unauthorized read access. Root cause is input validation bypass leading to security feature bypass. Aff...

CVE-2025-54248 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Scope is...

CVE-2025-54251

Affected product : Adobe Experience Manager (AEM) ≤ 6.5.23.0. Vulnerability type : XML Injection that can bypass security features. Root cause / vector : Unspecified in the CVE entry, but the Nuclei template and related notes describe an XML injection that allows manipulation of XML queries and c...

EUVD-2025-27380

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access...

CVE-2025-54249 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls...

CVE-2025-54249 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls...

CVE-2025-54249

Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that can bypass security features and allow unauthorized read access. The CVE identifier is CVE-2025-54249. Evidence from connected documents shows the issue is specific...

GHSA-WH92-6Q6G-PX7J Magento Community Edition Improper Input Validation vulnerability

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A successful attacker can abuse this to achieve session takeover, increasing the...

CVE-2025-54236

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high...

CVE-2025-54236

CVE-2025-54236 affects Adobe Commerce and Magento Open Source: Improper Input Validation could allow an attacker to take over customer sessions (high confidentiality/integrity impact) with network-level, no-interaction exploit. Affected: Adobe Commerce 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12,...

MapUrlToZone Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

MapUrlToZone Security Feature Bypass Vulnerability

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce that can be exploited by an attacker to bypass security restrictions...

Baicells SPECTRA LTE-U eNB 信任管理问题漏洞

The Baicells SPECTRA LTE-U eNB is an outdoor LTE-U base station from Baicells. A trust management issue vulnerability exists in the Baicells SPECTRA LTE-U eNB that stems from the use of hard-coded credentials that could lead to security feature bypass...

Baicells多款产品 安全漏洞

Baicells Nova436Q and others are products of Baicells Incorporated, U.S.A. Baicells Nova436Q is an advanced dual-carrier outdoor eNodeB eNB.Baicells NEUTRINO430 is an LTE base station.Baicells NOVA Series is a series of LTE base stations. A security vulnerability exists in several Baicells produc...

Baicells多款产品 安全漏洞

Baicells Nova 436Q and others are products of Baicells, Inc.Baicells Nova 436Q is an advanced dual-carrier outdoor eNodeB eNB. Baicells Nova 227 and others are products of the company.Baicells Nova 227 is a miniature base station.Baicells NEUTRINO430 is an LTE base station. A security vulnerabili...