CVE-2021-21083CWE-284

Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service

High · published June 28, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by an Improper Access Control vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service in the context of the current user.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01980 · 80.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-06-28T13:41Z
EPSS history
Timeline
  • 28 JUN 13:41Z
    Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service
    cvelistv5