Firetruck

CVE-2025-54253

KEV

Adobe Experience Manager Forms Code Execution Vulnerability

View CVE record →
Vendor / Project
Adobe
Product
Experience Manager (AEM) Forms
Date added
Oct 15, 2025
Due date
Nov 5, 2025
Known ransomware use
Unknown
CWEs
—

Description

Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes