CVE-2021-28626

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.

• CWE-285

• https://helpx.adobe.com/security/products/experience-manager/apsb21-39.htmlVendor Advisory
• https://helpx.adobe.com/security/products/experience-manager/apsb21-39.htmlVendor Advisory

Published

Aug 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-28620Adobe Animate version 21.0.6 (and earlier) is affected by a …7.8
• CVE-2021-28621Adobe Animate version 21.0.6 (and earlier) is affected by an…7.8
• CVE-2021-28622Adobe Animate version 21.0.6 (and earlier) is affected by an…7.8
• CVE-2021-28623Adobe Premiere Elements version 5.2 (and earlier) is affecte…5.5
• CVE-2021-28624Adobe Bridge version 11.0.2 (and earlier) are affected by a …7.8
• CVE-2021-28625Adobe Experience Manager Cloud Service offering, as well as …6.1
• CVE-2021-28627Adobe Experience Manager Cloud Service offering, as well as …8.8
• CVE-2021-28628Adobe Experience Manager Cloud Service offering, as well as …6.1
• CVE-2021-28629Adobe Animate version 21.0.6 (and earlier) is affected by a …7.8
• CVE-2021-28630Adobe Animate version 21.0.6 (and earlier) is affected by an…3.3
• CVE-2021-28631Acrobat Reader DC versions versions 2021.001.20155 (and earl…7.8
• CVE-2021-28632Acrobat Reader DC versions versions 2021.001.20155 (and earl…7.8