Lucene search

AdobeAPSB21-15

HistoryMay 11, 2021 - 12:00 a.m.

APSB21-15 Security update available for Adobe Experience Manager

2021-05-1100:00:00

helpx.adobe.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

51.9%

JSON

Adobe has released updates for Adobe Experience Manager (AEM). These updates resolve vulnerabilities rated Critical and Important. Successful exploitation of these vulnerabilities could result in arbitrary JavaScript execution in the browser.

Affected configurations

Vulners

Node

adobeexperience_managerRange≤6.5aem_cloud_service

adobeexperience_managerRange≤6.4aem_cloud_service

adobeexperience_managerRange≤6.3aem_cloud_service

CPENameOperatorVersion
adobe experience manager (aem)le6.5
adobe experience manager (aem)le6.4
adobe experience manager (aem)le6.3

Name	Operator	Version
adobe experience manager (aem)	le	6.5
adobe experience manager (aem)	le	6.4
adobe experience manager (aem)	le	6.3

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

51.9%

JSON

Related for APSB21-15