CVE-2021-28626CWE-285

Adobe Experience Manager Improper Authorization at /content/usergenerated

Low · published August 24, 2021

CVSS v3.1
3.7
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01335 · 71.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-08-24T17:54Z
EPSS history
Timeline
  • 24 AUG 17:54Z
    Adobe Experience Manager Improper Authorization at /content/usergenerated
    cvelistv5