CVE-2025-54251
Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
MEDIUM 4.3EPSS 1.7%
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access.
- Affected
- Adobe · Adobe Experience Manager
- CVSS v3.1 NVD
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - EPSS
- 1.71% chance of exploitation in the next 30 days, 77th percentile
- Nuclei
- medium · CWE-91
- Published
- 2025-09-09
- Updated
- 2025-09-30