CVE-2021-44177: Adobe Experience Manager Stored XSS in user name parameter in the package manager
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44177?
CVE-2021-44177 has a medium severity rating due to its potential for exploitation through stored Cross-Site Scripting.
How do I fix CVE-2021-44177?
To remediate CVE-2021-44177, update Adobe Experience Manager to version 6.5.11.0 or later.
What systems are affected by CVE-2021-44177?
CVE-2021-44177 affects Adobe Experience Manager Cloud Service and versions up to 6.5.10.0 of Adobe Experience Manager.
What types of attacks can CVE-2021-44177 facilitate?
CVE-2021-44177 can allow attackers to inject malicious JavaScript into web applications, enabling various security risks such as data theft.
Is there a workaround for CVE-2021-44177?
While the best solution for CVE-2021-44177 is to apply the available updates, restricting user input validation can serve as a temporary workaround.