CVE-2021-28627

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interaction.

• CWE-918
• CWE-918

• https://helpx.adobe.com/security/products/experience-manager/apsb21-39.htmlVendor Advisory
• https://helpx.adobe.com/security/products/experience-manager/apsb21-39.htmlVendor Advisory

Published

Aug 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-28621Adobe Animate version 21.0.6 (and earlier) is affected by an…7.8
• CVE-2021-28622Adobe Animate version 21.0.6 (and earlier) is affected by an…7.8
• CVE-2021-28623Adobe Premiere Elements version 5.2 (and earlier) is affecte…5.5
• CVE-2021-28624Adobe Bridge version 11.0.2 (and earlier) are affected by a …7.8
• CVE-2021-28625Adobe Experience Manager Cloud Service offering, as well as …6.1
• CVE-2021-28626Adobe Experience Manager Cloud Service offering, as well as …7.5
• CVE-2021-28628Adobe Experience Manager Cloud Service offering, as well as …6.1
• CVE-2021-28629Adobe Animate version 21.0.6 (and earlier) is affected by a …7.8
• CVE-2021-28630Adobe Animate version 21.0.6 (and earlier) is affected by an…3.3
• CVE-2021-28631Acrobat Reader DC versions versions 2021.001.20155 (and earl…7.8
• CVE-2021-28632Acrobat Reader DC versions versions 2021.001.20155 (and earl…7.8
• CVE-2021-28633Adobe Creative Cloud Desktop Application (installer) version…6.1