Vulnerabilities > Adobe > Experience Manager Cloud Service > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-13 | CVE-2021-44176 | Cross-site Scripting vulnerability in Adobe Experience Manager AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. | 4.3 |
| 2022-01-13 | CVE-2021-44177 | Cross-site Scripting vulnerability in Adobe Experience Manager AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. | 4.3 |
| 2022-01-13 | CVE-2021-44178 | Cross-site Scripting vulnerability in Adobe Experience Manager AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a reflected Cross-Site Scripting (XSS) vulnerability via the itemResourceType parameter. | 4.3 |
| 2021-06-28 | CVE-2021-21084 | Cross-site Scripting vulnerability in Adobe Experience Manager AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. | 4.3 |