CVE-2025-49533
Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)
Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.
Reserved 2025-06-06 | Published 2025-07-08 | Updated 2025-07-10 | Assigner adobeDeserialization of Untrusted Data (CWE-502)
helpx.adobe.com/security/products/aem-forms/apsb25-67.html
Support options
