CVE-2021-40722

CRITICAL

9.8

Descricao

AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado1/13/2022

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

adobe:experience_manageradobe:experience_manager_cloud_service

Fraquezas (CWE)

CWE-611CWE-611

Referencias

https://helpx.adobe.com/security/products/experience-manager/apsb21-103.html(psirt@adobe.com)

https://helpx.adobe.com/security/products/experience-manager/apsb21-103.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.