Experience Manager Forms
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:experience_manager_forms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Experience Manager Forms (580d6ef1-daa2-5b09-8ecb-8144304fcc30) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54254 |
vulnerable | 2026-06-08 07:33:12.038998 |
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
HIGH (8.6)
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope is changed. Exploitation of this issue does not require user interaction.
Published: 2025-08-05T16:53:39.954Z
Updated: 2025-08-22T16:33:26.932Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54253 |
vulnerable | 2026-06-08 07:33:12.038578 |
Adobe Experience Manager | Incorrect Authorization (CWE-863)
CRITICAL (10)
Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
Published: 2025-08-05T16:53:40.742Z
Updated: 2026-02-26T17:49:57.370Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6934 |
vulnerable | 2026-06-08 05:08:11.457414 |
Details available
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin module that could be used in cross-site scripting attacks.
Published: 2016-12-15T06:31:00.000Z
Updated: 2024-08-06T01:43:38.553Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.