rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-40606 
The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T00:00:00.000Z
CVE-2021-40607 
The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T11:04:06.000Z
CVE-2021-40608 
The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T00:00:00.000Z
CVE-2021-40609 
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T00:00:00.000Z
CVE-2021-40610 
Emlog Pro v 1.0.4 cross-site scripting (XSS) in Emlog Pro background management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-09T12:04:11.000Z
CVE-2021-40612 
An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T12:12:43.000Z
CVE-2021-40616 
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T09:55:34.000Z
CVE-2021-40617 
An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T18:28:50.000Z
CVE-2021-40618 
An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1) ADDR_CONT_USRN, 2) ADDR_CONT_PSWD, 3) SECN_CONT_USRN or 4) SECN_CONT_PSWD parameters in HoldAddressFields.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-12T17:39:55.000Z
CVE-2021-40633 
A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T10:22:11.000Z
CVE-2021-40635 
OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An attacker can inject a SQL query to extract information from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-03T13:25:20.000Z
CVE-2021-40636 
OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract information from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-03T13:54:40.000Z
CVE-2021-40637 
OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-03T14:04:21.000Z
CVE-2021-40639 
Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T21:17:11.000Z
CVE-2021-40642 
Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplib_misc.php. The secure flag is not set for txp_login session cookie in the application. If the secure flag is not set, then the cookie will be transmitted in clear-text if the user visits any HTTP URLs within the cookie's scope. An attacker may be able to induce this event by feeding a user suitable links, either directly or via another web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-29T10:25:00.000Z
CVE-2021-40643 
EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page (by default/usr/sbin/sendmail) it is possible to execute any command, which will be executed when we make a test of the configuration ("send test mail").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-30T10:41:32.000Z
CVE-2021-40644 
An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-30T20:44:48.000Z
CVE-2021-40645 
An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-30T20:56:16.000Z
CVE-2021-40647 
In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it allows arbitrary write anywhere in the programs memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T17:57:28.000Z
CVE-2021-40648 
In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current chunk. The next chunk is then freed later on, causing a freeing of an arbitrary amount of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-09T17:57:38.000Z
CVE-2021-40649 
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T09:35:13.000Z
CVE-2021-40650 
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T09:37:05.000Z
CVE-2021-40651 
OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-29T11:59:07.000Z
CVE-2021-40654 
An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T20:02:49.000Z
CVE-2021-40655 
An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T20:11:51.000Z
CVE-2021-40656 
libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T15:09:33.000Z
CVE-2021-40658 
Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T10:53:12.000Z
CVE-2021-40660 
An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T13:16:20.000Z
CVE-2021-40661 
A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 (SS Label 'IND780_8.0.07'), Version 7.2.10 June 18, 2012 (SS Label 'IND780_7.2.10'). It was possible to traverse the folders of the affected host by providing a traversal path to the 'webpage' parameter in AutoCE.ini This could allow a remote unauthenticated adversary to access additional files on the affected system. This could also allow the adversary to perform further enumeration against the affected host to identify the versions of the systems in use, in order to launch further attacks in future.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-31T00:00:00.000Z
CVE-2021-40662 
A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T20:39:46.000Z
CVE-2021-40663 
deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-30T11:52:46.000Z
CVE-2021-40668 
The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing, file read, and file write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-09T12:51:35.000Z
CVE-2021-40669 
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T18:02:54.000Z
CVE-2021-40670 
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T18:45:25.000Z
CVE-2021-40674 
An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T14:32:47.000Z
CVE-2021-40678 
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-14T12:16:48.000Z
CVE-2021-40680 
There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:N
version: 3.1
Published: 2022-04-25T04:12:10.000Z
CVE-2021-40683 
In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T16:29:56.000Z
CVE-2021-40684 
Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running in the container.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-22T16:35:35.000Z
CVE-2021-40690 Bypass of the secureValidation property
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Apache Software Foundation
product: Apache Santuario
Credits: lang: en
value: An Trinh, Calif.
Published: 2021-09-19T00:00:00.000Z
CVE-2021-40691 
A session hijack risk was identified in the Shibboleth authentication plugin.
Problem types: description: Session Hijack
Affected products: vendor: n/a
product: moodle
Published: 2022-01-21T18:17:49.000Z
CVE-2021-40692 
Insufficient capability checks made it possible for teachers to download users outside of their courses.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: moodle
Published: 2022-01-21T18:17:47.000Z
CVE-2021-40693 
An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.
Problem types: description: authentication bypass
Affected products: vendor: n/a
product: moodle
Published: 2022-01-21T18:17:47.000Z
CVE-2021-40694 
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
Problem types: description: arbitrary file read
Affected products: vendor: n/a
product: moodle
Published: 2022-01-21T18:17:34.000Z
CVE-2021-40695 
It was possible for a student to view their quiz grade before it had been released, using a quiz web service.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: moodle
Published: 2022-01-21T18:17:48.000Z
CVE-2021-40697 Adobe FrameMaker PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Adobe
product: FrameMaker
Published: 2021-09-29T15:41:01.311Z
CVE-2021-40698 ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass  
ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass  . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment. 
Problem types: cwe_id: CWE-242
description: Use of Inherently Dangerous Function (CWE-242)
Affected products: vendor: Adobe
product: ColdFusion
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
availabilityRequirement: NOT_DEFINED
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: LOW
confidentialityRequirement: NOT_DEFINED
environmentalScore: 7.4
environmentalSeverity: HIGH
exploitCodeMaturity: NOT_DEFINED
integrityImpact: LOW
integrityRequirement: NOT_DEFINED
modifiedAttackComplexity: LOW
modifiedAttackVector: NETWORK
modifiedAvailabilityImpact: LOW
modifiedConfidentialityImpact: LOW
modifiedIntegrityImpact: LOW
modifiedPrivilegesRequired: LOW
modifiedScope: NOT_DEFINED
modifiedUserInteraction: NONE
privilegesRequired: LOW
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: CHANGED
temporalScore: 7.4
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Published: 2023-09-07T12:54:33.320Z
CVE-2021-40699 ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation
ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment. 
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Adobe
product: ColdFusion
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
availabilityRequirement: NOT_DEFINED
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: LOW
confidentialityRequirement: NOT_DEFINED
environmentalScore: 7.4
environmentalSeverity: HIGH
exploitCodeMaturity: NOT_DEFINED
integrityImpact: LOW
integrityRequirement: NOT_DEFINED
modifiedAttackComplexity: LOW
modifiedAttackVector: NETWORK
modifiedAvailabilityImpact: LOW
modifiedConfidentialityImpact: LOW
modifiedIntegrityImpact: LOW
modifiedPrivilegesRequired: LOW
modifiedScope: NOT_DEFINED
modifiedUserInteraction: NONE
privilegesRequired: LOW
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: CHANGED
temporalScore: 7.4
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Published: 2023-09-07T12:54:41.029Z
CVE-2021-40700 Adobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Problem types: cwe_id: CWE-788
description: Access of Memory Location After End of Buffer (CWE-788)
Affected products: vendor: Adobe
product: Premiere
Published: 2021-09-27T15:43:44.274Z
CVE-2021-40701 Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Problem types: cwe_id: CWE-788
description: Access of Memory Location After End of Buffer (CWE-788)
Affected products: vendor: Adobe
product: Premiere
Published: 2021-09-27T15:43:32.682Z
CVE-2021-40702 Adobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Problem types: cwe_id: CWE-788
description: Access of Memory Location After End of Buffer (CWE-788)
Affected products: vendor: Adobe
product: Premiere
Published: 2021-09-27T15:42:53.629Z
CVE-2021-40703 Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Problem types: cwe_id: CWE-788
description: Access of Memory Location After End of Buffer (CWE-788)
Affected products: vendor: Adobe
product: Not a product
Published: 2021-09-27T15:43:19.972Z
CVE-2021-40708 Adobe Genuine Service Installer Privilege Escalation Vulnerability
Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to achieve read / write privileges to execute arbitrary code. User interaction is required to abuse this vulnerability.
Problem types: cwe_id: CWE-379
description: Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
Affected products: vendor: Adobe
product: GoCart
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2021-09-29T15:40:31.225Z
CVE-2021-40709 Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution
Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Problem types: cwe_id: CWE-120
description: Buffer Overflow (CWE-120)
Affected products: vendor: Adobe
product: Photoshop
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2021-09-27T15:43:38.164Z
CVE-2021-40710 Adobe Premiere Pro 2021 SVG File Parsing Leads to Memory Corruption
Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Problem types: cwe_id: CWE-788
description: Access of Memory Location After End of Buffer (CWE-788)
Affected products: vendor: Adobe
product: Premiere
Published: 2021-09-29T15:41:07.817Z
CVE-2021-40711 Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution
Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve arbitrary code execution. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (Stored XSS) (CWE-79)
Affected products: vendor: Adobe
product: Experience Manager
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Published: 2021-09-27T15:42:36.051Z