CVE-2021-28627: Adobe Experience Manager

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interaction.

Affected products

• Adobe Experience Manager: up to and including 6.5.8.0

Published 2021-08-24. Last modified 2026-06-17.