Critical Vulnerabilities in Adobe ColdFusion and Experience Manager

Csa.Sg

Critical Vulnerabilities in Adobe ColdFusion and Experience Manager

First seen 16 Dec 2025, 08:55 UTC • •44.2

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Adobe has released security updates for critical vulnerabilities in Adobe ColdFusion and Adobe Experience Manager. The vulnerabilities include CVE-2025-61808, CVE-2025-61809 for ColdFusion and CVE-2025-64537, CVE-2025-64539 for Experience Manager. Users and administrators are advised to update to the latest versions immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 182d ago How this analysis works

More articles in this cluster (1)

Threat Graph

9 entities, 16 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Organization (1)

Adobe

Vulnerability (5)

CVE-2025-61808
CVE-2025-61809
CVE-2025-64537
CVE-2025-64539
XSS

Affected Platform (3)

Adobe ColdFusion
Adobe Experience Manager
AEM Cloud Service

Relationships

CVE-2025-61808 targets Adobe ColdFusion
CVE-2025-61808 targets Adobe Experience Manager
CVE-2025-61808 targets AEM Cloud Service
CVE-2025-61809 targets Adobe ColdFusion
CVE-2025-61809 targets Adobe Experience Manager
CVE-2025-61809 targets AEM Cloud Service
CVE-2025-64537 targets Adobe ColdFusion
CVE-2025-64537 targets Adobe Experience Manager
CVE-2025-64537 targets AEM Cloud Service
CVE-2025-64539 targets Adobe ColdFusion
CVE-2025-64539 targets Adobe Experience Manager
CVE-2025-64539 targets AEM Cloud Service
XSS targets Adobe ColdFusion
XSS targets Adobe Experience Manager
XSS targets AEM Cloud Service
CVE-2025-61808 related to Adobe

Following this threat?

Track Adobe and CVE-2025-61808 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway Sangoma Switchvox SMB Edition 8.3 is facing active exploitation of multiple vulnerabilities, particularly CVE-2026-9586, which allows unauthenticated SQL injection leading to remote code execution. The flaw can be exploited by sending crafted HTTP POST requests to the /pa endpoint, enabling attackers to execute…

Critical Stored XSS Vulnerabilities Found in SiYuan Versions Before 3.7.4 Two critical vulnerabilities, CVE-2026-73050 and CVE-2026-73052, have been identified in SiYuan versions prior to 3.7.4. CVE-2026-73050 allows attackers to exploit stored cross-site scripting (XSS) via unescaped color fields in select options, executing arbitrary JavaScript in victim browsers. CVE-2026-73052 enables…