Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Adobe Subscribe
Filtered by product Adobe Consulting Services Commons
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-21043 1 Adobe 1 Adobe Consulting Services Commons 2021-12-10 4.3 MEDIUM 6.1 MEDIUM
ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content into vulnerable form fields and execute it within the context of the victim's browser. Exploitation of this issue requires user interaction in order to be successful.