Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-28627 EUVD-2021-15296GHSA-h4cp-xwqq-m567

Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass

Published Aug 24, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interaction.

Affected products

VendorProductAffectedFixed
Adobe Experience Manager unspecified – ≤ 6.5.8.0, unspecified – ≤ None —

References