PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
high·Product Based Web Vulnerabilities·Updated Jan 20, 2026

Adobe Experience Manager Forms - Insecure Deserialization

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
2.8k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2025-49533
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.

Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Adobe Experience Manager (MS)by Adobe
0
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
Adobe Experience Manager 6.5.23.0 - SSRF
→critical
Adobe Commerce (Magento) - Remote Code Execution
→critical
Progress ADC LoadMaster - Command Injection
→high
Joomla com_jobprofile SQL Injection Scanner
→critical
CVE-2022-40619 Scanner
→critical
Flowise < 3.1.2 - node-custom-function Unauthorized RCE
→critical
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
→medium
WP Live Chat Support <= 8.0.27 Stored Cross-Site Scripting
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Adobe Experience Manager Forms - Insecure Deserialization Scanner | S4E