← CVE Intelligence

CVE-2021-40722

AEM Forms Improper Restriction of XML External Entity Reference PUBLISHED

Description (CNA)

AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE.

Affected (CNA)

Vendor / productVersions
Adobe / Experience Manageraffected unspecified through 6.5.10.0; affected unspecified through None

CWE

CWE-611

References

ADP enrichment

CVE

No English description supplied.