CVE-2025-49533criticalexplotación observadaCWE-502

CVE-2025-49533: fallo crítico en Adobe Experience Manager (MS)

Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Adobe Experience Manager

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

77Vexday Risk Score

Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.

ssvc Actcvss 9.8epss 52%
de la publicación al arma
Publicada en NVD8 jul
VulnCheck+22d
Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Adobe · Adobe Experience Manager (MS)