Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

 

 

Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.

 

https://helpx.adobe.com/security/products/aem-forms/apsb25-67.html