CVE-2025-54249
MEDIUM EXPLOITED NUCLEIAdobe Experience Manager < 6.5.23.0 - SSRF
Title source: ruleDescription
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass security controls allowing unauthorized read access.
Nuclei Templates (1)
Adobe Experience Manager ≤ 6.5.23.0 – SSRF
MEDIUMVERIFIEDby DhiyaneshDk,assetnote
FOFA:
body="/libs/granite/core/content/login.html"
Scores
CVSS v3
6.5
EPSS
0.0634
EPSS Percentile
91.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
VulnCheck KEV
2025-10-16
CWE
CWE-918
Status
published
Products (3)
adobe/experience_manager
6.5 (2 CPE variants)
adobe/experience_manager
< 2025.8.0
adobe/experience_manager
< 6.5.23.0
Published
Sep 09, 2025
Tracked Since
Feb 18, 2026