CVE-2025-54249: Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54249?
CVE-2025-54249 is categorized as a moderate severity vulnerability due to its potential for security feature bypass.
How do I fix CVE-2025-54249?
To remediate CVE-2025-54249, it is recommended to update Adobe Experience Manager to version 6.5.24.0 or later.
What does CVE-2025-54249 allow an attacker to do?
CVE-2025-54249 allows a low-privileged attacker to exploit Server-Side Request Forgery to manipulate server-side requests.
Which versions of Adobe Experience Manager are affected by CVE-2025-54249?
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by CVE-2025-54249.
Is there a workaround for CVE-2025-54249?
There are no official workarounds for CVE-2025-54249; the best course of action is to apply the update.