Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)
CVSS v3
9.8
CRITICAL
EPSS Score
76.4%
exploit probability
CISA KEV
No
known exploited
Exploitation
none
SSVC status
Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.
Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged.
Active exploitation of CVE-2025-49533 has not been confirmed. The EPSS score is 76.4%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2025-49533 has a CVSS v3 base score of 9.8 (CRITICAL severity), with vector string 3.1.
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).