Lucene search

K
hackeroneIsmailmuhH1:1321070
HistoryAug 27, 2021 - 8:58 a.m.

Adobe: AEM forms XXE Vulnerability

2021-08-2708:58:07
ismailmuh
hackerone.com
21

0.004 Low

EPSS

Percentile

73.5%

AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE.

CVE: CVE-2021-40722
Ref: https://helpx.adobe.com/security/products/experience-manager/apsb21-103.html

We thank @ismailmuh for reporting this to Adobe!

0.004 Low

EPSS

Percentile

73.5%