Vulnerabilities > CVE-2021-40714 - Unspecified vulnerability in Adobe Experience Manager

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

adobe

NVD

Published: 2021-09-27

Updated: 2024-11-21

Summary

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the accesskey parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Experience Manager - Adobe Experience Manager 5.6 Adobe Experience Manager 5.6.0 Adobe Experience Manager 5.6.1 Adobe Experience Manager 6.0 Adobe Experience Manager 6.0.0 Adobe Experience Manager 6.0.0.0 Adobe Experience Manager 6.1 Adobe Experience Manager 6.1.0 Adobe Experience Manager 6.1.0.0 Adobe Experience Manager 6.1.0.1 Adobe Experience Manager 6.1.1.0 Adobe Experience Manager 6.1.2.0 Adobe Experience Manager 6.1.2.1 Adobe Experience Manager 6.1.2.2 Adobe Experience Manager 6.1.2.3 Adobe Experience Manager 6.1.2.4 Adobe Experience Manager 6.1.2.5 Adobe Experience Manager 6.1.2.6 Adobe Experience Manager 6.1.2.7 Adobe Experience Manager 6.1.2.8 Adobe Experience Manager 6.1.2.9 Adobe Experience Manager 6.1.2.10 Adobe Experience Manager 6.1.2.11 Adobe Experience Manager 6.1.2.12 Adobe Experience Manager 6.1.2.13 Adobe Experience Manager 6.1.2.14 Adobe Experience Manager 6.1.2.15 Adobe Experience Manager 6.1.2.16 Adobe Experience Manager 6.2 Adobe Experience Manager 6.2.0 Adobe Experience Manager 6.2.0.0 Adobe Experience Manager 6.2.0.1 Adobe Experience Manager 6.2.1.0 Adobe Experience Manager 6.2.1.1 Adobe Experience Manager 6.2.1.2 Adobe Experience Manager 6.2.1.3 Adobe Experience Manager 6.2.1.4 Adobe Experience Manager 6.2.1.5 Adobe Experience Manager 6.2.1.6 Adobe Experience Manager 6.2.1.7 Adobe Experience Manager 6.2.1.8 Adobe Experience Manager 6.2.1.9 Adobe Experience Manager 6.2.1.10 Adobe Experience Manager 6.2.1.11 Adobe Experience Manager 6.2.1.12.1 Adobe Experience Manager 6.2.1.13 Adobe Experience Manager 6.2.1.14 Adobe Experience Manager 6.2.1.15 Adobe Experience Manager 6.2.1.16 Adobe Experience Manager 6.3 Adobe Experience Manager 6.3.0 Adobe Experience Manager 6.3.0.0 Adobe Experience Manager 6.3.0.1 Adobe Experience Manager 6.3.1.0 Adobe Experience Manager 6.3.2.0 Adobe Experience Manager 6.3.2.1 Adobe Experience Manager 6.3.2.2 Adobe Experience Manager 6.3.3.0 Adobe Experience Manager 6.3.3.7 Adobe Experience Manager 6.3.3.8 Adobe Experience Manager 6.4 Adobe Experience Manager 6.4.0 Adobe Experience Manager 6.4.0.0 Adobe Experience Manager 6.4.1.0 Adobe Experience Manager 6.4.2.0 Adobe Experience Manager 6.4.7.0 Adobe Experience Manager 6.4.8.1 Adobe Experience Manager 6.4.8.2 Adobe Experience Manager 6.4.8.3 Adobe Experience Manager 6.4.8.4 Adobe Experience Manager 6.5 Adobe Experience Manager 6.5.0 Adobe Experience Manager 6.5.0.0 Adobe Experience Manager 6.5.1.0 Adobe Experience Manager 6.5.2.0 Adobe Experience Manager 6.5.3.0 Adobe Experience Manager 6.5.4.0 Adobe Experience Manager 6.5.5.0 Adobe Experience Manager 6.5.6.0 Adobe Experience Manager 6.5.7.0 Adobe Experience Manager 6.5.8.0 Adobe Experience Manager 6.5.9.0	194

Summary

Vulnerable Configurations

References