Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.5.25.0CPE matchmatch criteria | cpe:2.3:a:adobe:experience_manager:*:*:*:*:-:*:*:* | ||
< 2026.5.0CPE matchmatch criteria | cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* | ||
6.5CPE matchmatch criteria | cpe:2.3:a:adobe:experience_manager:6.5:-:*:*:lts:*:*:* | ||
6.5CPE matchmatch criteria | cpe:2.3:a:adobe:experience_manager:6.5:sp1:*:*:lts:*:*:* | ||
>= 0, <= 2026.04CPE match | cpe:2.3:a:adobe:experience_manager:*:*:*:*:aem_cloud_service:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.