Adobe Experience Manager Improper Input Validation Vulnerability Allowing Security Feature Bypass

A vulnerability allowing security feature bypass through improper input validation has been identified in Adobe Experience Manager (AEM) versions 6.5.23.0 and earlier. This vulnerability could be exploited by a low-privileged attacker to bypass security measures and gain unauthorized read access.

Impact

Exploitation of this vulnerability could lead to unauthorized read access by bypassing security features.

Remediation

Users are advised to update to Adobe Experience Manager 6.5.23 (GRANITE-61551 Hotfix) or AEM Cloud Service Release 2025.9. For assistance with AEM versions 6.4, 6.3, and 6.2, please contact Adobe customer care.