The vulnerability is a Cross‑Site Request Forgery flaw that allows an attacker to bypass security controls and write data to the system. The flaw requires the victim to visit a crafted URL or interact with a compromised page, after which the attacker can gain unauthorized write access, potentially disrupting availability in a limited way. This weakness is identified as CWE‑352.

Adobe Experience Manager Forms JEE used in versions 6.5 and 6.5 LTS is affected. The vulnerability impacts the Forms JEE component and could affect any installations running these versions.

The CVSS score of 7.1 indicates a high severity vulnerability. The EPSS score of 1% suggests a low exploitation probability. The vulnerability is not listed in CISA KEV, indicating limited evidence of widespread exploitation. Exploitation requires user interaction, as the attacker must get the victim to visit a malicious URL or interact with a compromised web page. Successful exploitation could allow an attacker to perform unauthorized write operations, resulting in limited disruption to availability.