CVE-2021-40712— Adobe Experience Manager 输入验证错误漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-40712の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS
ソース: NVD (National Vulnerability Database)
脆弱性説明
Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to achieve server-side denial of service.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
输入验证不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Adobe Experience Manager 输入验证错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Adobe Experience Manager（AEM）是美国奥多比（Adobe）公司的一套可用于构建网站、移动应用程序和表单的内容管理解决方案。该方案支持移动内容管理、营销销售活动管理和多站点管理等。 Adobe Experience Manager存在输入验证错误漏洞，攻击者可利用该漏洞触发应用程序拒绝服务
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Adobe | Experience Manager | unspecified ~ 6.5.9.0 | - |
II. CVE-2021-40712の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-40712のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2021-09-27 · 18 CVEs total
| CVE-2021-39826 | 8.6 HIGH | Adobe Digital Editions Command Execution Vulnerability |
| CVE-2021-39823 | 7.8 HIGH | svg-native-viewer Heap Buffer overflow Vulnerability |
| CVE-2021-40709 | 7.8 HIGH | Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution |
| CVE-2021-39819 | 7.8 HIGH | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2021-39818 | 7.8 HIGH | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2021-39825 | 7.8 HIGH | Adobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execut |
| CVE-2021-28613 | 7.4 HIGH | Adobe Creative Cloud Arbitrary File Overwrite Vulnerability |
| CVE-2021-39827 | 6.5 MEDIUM | Adobe Digital Editions Installer flaw leads to Arbitrary File System Write |
| CVE-2021-40714 | 6.1 MEDIUM | Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter |
| CVE-2021-40713 | 5.9 MEDIUM | Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle A |
| CVE-2021-39828 | 5.8 MEDIUM | Adobe Digital Editions Installer flaw leads to Local Privilege Escalation |
| CVE-2021-40711 | 5.4 MEDIUM | Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Executio |
| CVE-2021-40702 | Adobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-39824 | Adobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40703 | Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40701 | Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40700 | Adobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code |
IV. 関連脆弱性
同じ製品: Experience Manager
同じベンダー: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
V. CVE-2021-40712へのコメント
まだコメントはありません