CVE-2025-49533 — Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

CVE-2025-49533

Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502) PUBLISHED

Description (CNA)

Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.

Affected (CNA)

Vendor / product	Versions
Adobe / Adobe Experience Manager (MS)	affected 0 through 6.5.23.0

CWE

CWE-502

References

https://helpx.adobe.com/security/products/aem-forms/apsb25-67.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.