CISA Alerts on Adobe Experience Manager Flaw Exploited for Code Execution

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Adobe Experience Manager Forms vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that the flaw is being actively exploited in the wild.

The security issue, tracked as CVE-2025-54253, affects Adobe Experience Manager Forms in JEE and allows attackers to execute arbitrary code on vulnerable systems.

Critical Vulnerability Enables Code Execution

CVE-2025-54253 is an unspecified vulnerability in Adobe Experience Manager Forms that gives threat actors the ability to run malicious code remotely on affected servers.

Adobe Experience Manager is widely used by enterprises for content management and digital experience delivery, making this vulnerability particularly concerning for organizations that rely on the platform.

The flaw specifically impacts the JEE (Java Enterprise Edition) deployment of AEM Forms, which many businesses use to create and manage ...