Experience Manager Forms vulnerabilities

2 known vulnerabilities in Experience Manager Forms from Adobe. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Adobe Experience Manager: Improper Restriction of XML External Entity Reference

  CVE-2025-54254Aug 5, 2025AdobeEPSS 53.9%

  Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive

• 10.0 Critical severity

  Adobe Experience Manager Forms Code Execution Exploited

  CVE-2025-54253Aug 5, 2025AdobeEPSS 80.8%

  Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of t