632 matches found
CVE-2021-39159
BinderHub (a Kubernetes-based service for sharing reproducible environments) has a remote code execution vulnerability in affected versions that could let an attacker run code in the BinderHub context and exfiltrate deployment credentials (e.g., JupyterHub tokens, Kubernetes service accounts, and...
CVE-2021-28628
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser wh...
CVE-2021-28628
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser wh...
CVE-2021-28626
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service...
CVE-2021-28627
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...
CVE-2021-28625
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser wh...
CVE-2021-28625
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser wh...
CVE-2021-28626
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service...
CVE-2021-28627
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...
Cross site scripting
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser wh...
Authorization
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service...
Server side request forgery (ssrf)
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...
CVE-2021-28627
CVE-2021-28627 affects Adobe Experience Manager Cloud Service and on-prem AEM 6.5.8.0 and below with a Server-Side Request Forgery (SSRF). An authenticated attacker could use SSRF to contact systems blocked by the dispatcher without user interaction. The issue is documented in APSB21-39; remediat...
CVE-2021-28627 Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 and below is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interacti...
CVE-2021-28628
CVE-2021-28628 is an XSS vulnerability affecting Adobe Experience Manager (AEM) Cloud Service and on-prem versions 6.5.8.0 and earlier, specifically in inbox render.jsp. The root cause is cross-site scripting via vulnerable form fields, allowing malicious JavaScript to run in a victim’s browser w...
CVE-2021-28625
CVE-2021-28625 is an XSS vulnerability in Adobe Experience Manager Cloud Service and On-Prem/Legacy 6.5.8.0 and earlier. The issue allows injection of malicious script into vulnerable form fields, leading to JavaScript execution in a victim’s browser when accessing the affected page. The connecte...
CVE-2021-28626
CVE-2021-28626 affects Adobe Experience Manager Cloud Service and older AEM 6.5.8.0 and below, via an Improper Authorization flaw that lets unauthenticated attackers create nodes under a location, potentially causing application denial-of-service. The issue does not require user interaction. Publ...
PT-2021-24125
Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Cloud Service Appliance EPM CSA affected versions not specified Description: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows an unauthenticated user to execute arbitrary code with...
DoD Cloud Computing Impact Levels 4-5
Moving past DoD Impact Level 2 IL2, the logical next step should be IL3; however, IL3 is no longer used by the Department of Defense DoD and has been consolidated into IL4. DoD IL4 is designed to store, process, and transmit up to controlled unclassified information CUI related to military or...
