CVE-2021-40722 — AEM Forms Improper Restriction of XML External Entity Reference
AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacke…
Published: 2022-01-13 · CVSS: 9.8 · CVSS 3.1
AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7