The vulnerability is a Cross‑Site Request Forgery flaw that allows an attacker to bypass security controls and write data to the system. The flaw requires the victim to visit a crafted URL or interact with a compromised page, after which the attacker can gain unauthorized write access, potentially disrupting availability in a limited way. This weakness is identified as CWE‑352.

Adobe Experience Manager Forms JEE used in versions 6.5 and 6.5 LTS is affected. The vulnerability impacts the Forms JEE component and could affect any installations running these versions.

The CVSS score of 7.1 indicates a high severity vulnerability that, while not critical, poses a significant risk to confidentiality and integrity when exploited. The EPSS score is not available and the vulnerability is not listed in CISA KEV, suggesting that mass exploitation has not yet been recorded. The attack requires user interaction, so the likelihood is moderate, but organizations should still address the flaw promptly to prevent potential unauthorized writes.