CVE-2025-54246

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

CVE-2025-54107

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-54917 MapUrlToZone Security Feature Bypass Vulnerability

...

CVE-2025-54107 MapUrlToZone Security Feature Bypass Vulnerability

...

CVE-2025-54107 MapUrlToZone Security Feature Bypass Vulnerability

...

CVE-2025-54250 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

CVE-2025-54250

Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that can bypass security features, allowing a high-privilege attacker to gain unauthorized write access. The issue is tied to a security feature bypass via input validation weak...

CVE-2025-54246 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

CVE-2025-54247

CVE-2025-54247 affects Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier. The issue is improper input validation that can cause a security feature bypass, allowing a low-privileged attacker to read data unauthorizedly. Several connected sources confirm the vulnerability and its impact,...

CVE-2025-54246

Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier are affected by CVE-2025-54246, an Incorrect Authorization vulnerability that could bypass security features and allow unauthorized write access. A low-privileged, network-attacker could exploit this with no user interaction; the impact...

CVE-2025-54248 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Scope is...

CVE-2025-54248

CVE-2025-54248 affects Adobe Experience Manager 6.5.23.0 and earlier, where an Improper Input Validation vulnerability could allow a low-privileged attacker to bypass security measures and gain unauthorized read access. Root cause is input validation bypass leading to security feature bypass. Aff...

CVE-2025-54251

Affected product : Adobe Experience Manager (AEM) ≤ 6.5.23.0. Vulnerability type : XML Injection that can bypass security features. Root cause / vector : Unspecified in the CVE entry, but the Nuclei template and related notes describe an XML injection that allows manipulation of XML queries and c...

EUVD-2025-27380

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access...

CVE-2025-54249

Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that can bypass security features and allow unauthorized read access. The CVE identifier is CVE-2025-54249. Evidence from connected documents shows the issue is specific...

CVE-2025-54249 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls...

CVE-2025-54249 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls...

GHSA-WH92-6Q6G-PX7J Magento Community Edition Improper Input Validation vulnerability

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A successful attacker can abuse this to achieve session takeover, increasing the...

CVE-2025-54236

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high...

CVE-2025-54236

CVE-2025-54236 affects Adobe Commerce and Magento Open Source: Improper Input Validation could allow an attacker to take over customer sessions (high confidentiality/integrity impact) with network-level, no-interaction exploit. Affected: Adobe Commerce 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12,...