CVE-2021-44178: Improper Neutralization of Input During Web Page Generation

AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a reflected Cross-Site Scripting XSS vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be...

CVE-2021-45231

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2021-43764

AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

CVE-2021-44178

AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a reflected Cross-Site Scripting XSS vulnerability via the itemResourceType parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be...

CVE-2021-44176

AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

CVE-2021-40722

AEM Forms Cloud Service offering, as well as version 6.5.10.0 and below are affected by an XML External Entity XXE injection vulnerability that could be abused by an attacker to achieve RCE...

CVE-2021-43765

AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

PT-2021-5965

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below Adobe Experience Manager's Cloud Service offering Description The issue is related to insufficient protection of the web page structure, which could allow a remote attacker to execute...

PT-2021-5517

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below AEM Forms Cloud Service offering Description The issue is related to an XML External Entity XXE injection vulnerability due to improper restriction of XML external entity references. This...

PT-2021-5986

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below Adobe Experience Manager's Cloud Service offering Description The issue is related to insufficient input validation, which could allow a remote attacker to bypass security controls. Sensitiv...

PT-2021-5983

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below Adobe Experience Manager's Cloud Service offering Description The issue is related to a reflected Cross-Site Scripting XSS vulnerability via the itemResourceType parameter. If an attacker...

PT-2021-5990

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below Adobe Experience Manager Cloud Service offering Description The issue is related to insufficient protection of the web page structure, allowing a remote attacker to execute arbitrary code. I...

PT-2021-7213

Name of the Vulnerable Software and Affected Versions Oracle Cloud Infrastructure affected versions not specified Oracle Identity Cloud Service affected versions not specified Description The issue concerns a vulnerability in Oracle's cloud infrastructure products, allowing a high-privileged...

PT-2021-23636

ParsedReport CompletenessLow 07-10-2025 Crimson Collective: A New Threat Group Observed Operating in the Cloud https://www.rapid7.com/blog/post/tr-crimson-collective-a-new-threat-group-observed-operating-in-the-cloud Report completeness: Low Actors/Campaigns: Crimson collective Threats: Truffleho...

CVE-2021-22272 ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.

The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch...

SAP Contact Center Cross-Site Scripting Vulnerability (CNVD-2023-00364)

SAP Contact Center, a new cloud service from SAP, is a modern contact center solution built on top of SAP's on-premise contact center software that puts agents at their fingertips. The vulnerability stems from a program that does not properly encode input. An attacker could exploit the...

SAP Contact Center Cross-Site Scripting Vulnerability

SAP Contact Center, a new cloud service from SAP, is a modern contact center solution built on top of SAP's on-premise contact center software that puts agents at their fingertips. The vulnerability stems from a program that does not properly encode input. An attacker could use the vulnerability ...

SAP Contact Center Cross-Site Scripting Vulnerability (CNVD-2023-00365)

SAP Contact Center, a new cloud service from SAP, is a modern contact center solution built on top of SAP's on-premise contact center software that puts agents at their fingertips. The vulnerability stems from a program that does not properly encode input. An attacker could exploit the...

SAP Contact Center 跨站脚本漏洞

SAP Contact Center, a new cloud service from SAP, is a modern contact center solution built on top of SAP's on-premise contact center software that puts agents at their fingertips. The vulnerability stems from a program that does not properly encode input. An attacker could use the vulnerability ...

SAP Contact Center 安全漏洞

SAP Contact Center is a new cloud service from SAP that is built on top of SAP's on-premise contact center software, putting modern contact center solutions at the agent's fingertips. A cross-site scripting vulnerability exists in SAP Contact Center 700. The vulnerability stems from the program n...