CVE Watch—

CVE-2025-54253

Adobe Experience Manager Forms Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

87.5%

p100

KEV

YES

Oct 15, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

87.5%EPSS · 30 days89.8%

2026-06-302026-07-16

KEV catalog record

Product

Adobe / Experience Manager (AEM) Forms

Vulnerability

Adobe Experience Manager Forms Code Execution Vulnerability

Added to KEV

Oct 15, 2025

Remediate by

Nov 5, 2025

Known ransomware use

Summary description

Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-54253

Related CVEs

No related CVEs by CWE or product.