← back
CVE-2021-40712mediumCWE-20

Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.7%
exploitation probability
1.7%top 24% of all CVEs
observed exploitation
nono source reports it
Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to achieve server-side denial of service.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H