1. Home
  2. CVE Database
  3. CVE-2021-43762
MEDIUM · 6.5

CVE-2021-43762

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web appl...

Vulnerability Description

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vulnerability.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AdobeExperience Manager<= 6.5.10.0
AdobeExperience Manager Cloud Service-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2021-43762?

CVE-2021-43762 is a vulnerability with a CVSS score of 6.5 (MEDIUM). AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web appl...

How severe is CVE-2021-43762?

CVE-2021-43762 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-43762?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Experience Manager, Adobe Experience Manager Cloud Service.