CVE-2021-28626: 
Adobe Experience Manager vulnerability analysis and mitigation

Adobe Experience Manager Cloud Service offering and versions 6.5.8.0 (and below) were affected by an Improper Authorization vulnerability that was disclosed in August 2021. The vulnerability allowed unauthorized users to create nodes under specific locations in the system (NVD).

The vulnerability is classified as an Improper Authorization issue (CWE-285). It received a CVSS v3.1 Base Score of 7.5 (HIGH) from NIST NVD, while Adobe Systems assigned it a lower score of 3.7 (LOW). The vulnerability vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating it can be exploited remotely with low attack complexity and requires no privileges or user interaction (NVD).

If exploited, this vulnerability could allow an unauthenticated attacker to cause an application denial-of-service. The attack does not require any user interaction to be successful (NVD).

The vulnerability can be exploited remotely by an unauthenticated attacker without requiring any user interaction. The low attack complexity and lack of required privileges make this vulnerability relatively straightforward to exploit (NVD).

Adobe has addressed this vulnerability in versions after 6.5.8.0 of Adobe Experience Manager. Users should upgrade to the latest version to mitigate this security issue (NVD).