Vulnerabilities > CVE-2021-28626 - Unspecified vulnerability in Adobe Experience Manager

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

adobe

NVD

Published: 2021-08-24

Updated: 2022-04-25

Summary

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Experience Manager - Adobe Experience Manager 5.6 Adobe Experience Manager 5.6.0 Adobe Experience Manager 5.6.1 Adobe Experience Manager 6.0 Adobe Experience Manager 6.0.0 Adobe Experience Manager 6.0.0.0 Adobe Experience Manager 6.1 Adobe Experience Manager 6.1.0 Adobe Experience Manager 6.1.0.0 Adobe Experience Manager 6.1.0.1 Adobe Experience Manager 6.1.1.0 Adobe Experience Manager 6.1.2.0 Adobe Experience Manager 6.1.2.1 Adobe Experience Manager 6.1.2.2 Adobe Experience Manager 6.1.2.3 Adobe Experience Manager 6.1.2.4 Adobe Experience Manager 6.1.2.5 Adobe Experience Manager 6.1.2.6 Adobe Experience Manager 6.1.2.7 Adobe Experience Manager 6.1.2.8 Adobe Experience Manager 6.1.2.9 Adobe Experience Manager 6.1.2.10 Adobe Experience Manager 6.1.2.11 Adobe Experience Manager 6.1.2.12 Adobe Experience Manager 6.1.2.13 Adobe Experience Manager 6.1.2.14 Adobe Experience Manager 6.1.2.15 Adobe Experience Manager 6.1.2.16 Adobe Experience Manager 6.2 Adobe Experience Manager 6.2.0 Adobe Experience Manager 6.2.0.0 Adobe Experience Manager 6.2.0.1 Adobe Experience Manager 6.2.1.0 Adobe Experience Manager 6.2.1.1 Adobe Experience Manager 6.2.1.2 Adobe Experience Manager 6.2.1.3 Adobe Experience Manager 6.2.1.4 Adobe Experience Manager 6.2.1.5 Adobe Experience Manager 6.2.1.6 Adobe Experience Manager 6.2.1.7 Adobe Experience Manager 6.2.1.8 Adobe Experience Manager 6.2.1.9 Adobe Experience Manager 6.2.1.10 Adobe Experience Manager 6.2.1.11 Adobe Experience Manager 6.2.1.12.1 Adobe Experience Manager 6.2.1.13 Adobe Experience Manager 6.2.1.14 Adobe Experience Manager 6.2.1.15 Adobe Experience Manager 6.2.1.16 Adobe Experience Manager 6.3 Adobe Experience Manager 6.3.0 Adobe Experience Manager 6.3.0.0 Adobe Experience Manager 6.3.0.1 Adobe Experience Manager 6.3.1.0 Adobe Experience Manager 6.3.2.0 Adobe Experience Manager 6.3.2.1 Adobe Experience Manager 6.3.2.2 Adobe Experience Manager 6.3.3.0 Adobe Experience Manager 6.3.3.7 Adobe Experience Manager 6.3.3.8 Adobe Experience Manager 6.4 Adobe Experience Manager 6.4.0 Adobe Experience Manager 6.4.0.0 Adobe Experience Manager 6.4.1.0 Adobe Experience Manager 6.4.2.0 Adobe Experience Manager 6.4.7.0 Adobe Experience Manager 6.4.8.1 Adobe Experience Manager 6.4.8.2 Adobe Experience Manager 6.4.8.3 Adobe Experience Manager 6.4.8.4 Adobe Experience Manager 6.5 Adobe Experience Manager 6.5.0 Adobe Experience Manager 6.5.0.0 Adobe Experience Manager 6.5.1.0 Adobe Experience Manager 6.5.2.0 Adobe Experience Manager 6.5.3.0 Adobe Experience Manager 6.5.4.0 Adobe Experience Manager 6.5.5.0 Adobe Experience Manager 6.5.6.0 Adobe Experience Manager 6.5.7.0 Adobe Experience Manager 6.5.8.0	192

References

https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html