QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-28626

Back to search

CVE-2021-28626

Published: Aug 24, 2021

Modified: Apr 23, 2025

PUBLISHED

CVSS v3.1

3.7

LOW

Description

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.

VendorProductVersions

Adobe

Experience Manager

affected
unspecified - <= 6.5.8.0
affected
unspecified - <= None

Weaknesses (CWE)

CWE-285

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now