Forwarded by Taiwan Computer Network Crisis and Coordination Center (TWCERTCC-200-202508-00000003)

[Description]
Adobe has released a critical security vulnerability (CVE-2025-54253, CVSS: 10.0) for Adobe Experience Manager Forms on Java Enterprise Edition (JEE). This vulnerability is due to a configuration error and can be exploited by attackers to bypass security mechanisms and execute arbitrary code.

[Affected Platforms]
Adobe Experience Manager (AEM) Forms on JEE 6.5.23.0 and earlier

[Recommended Action]
Update Adobe Experience Manager (AEM) Forms on JEE to version 6.5.0-0108.

[References]
1. https://www.twcert.org.tw/tw/cp-169-10315-0abd1-1.html