CVE-2025-47096Improper Input Validation in Adobe Experience Manager

Severity
3.5LOWNVD
EPSS
0.3%
top 45.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 10
Latest updateJun 11

Description

Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, allowing a low impact to the integrity of the component. Exploitation of this issue requires user interaction in that a victim must interact with the malicious content. Low privileges are required.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

NVDadobe/experience_manager< 6.5.23.0+1

🔴Vulnerability Details

2
GHSA
GHSA-q48v-v24m-9p7q: Adobe Experience Manager versions 62025-06-11
CVEList
Adobe Experience Manager | Improper Input Validation (CWE-20)2025-06-10
CVE-2025-47096 — Improper Input Validation in Adobe | cvebase