CVE-2021-40722

CRITICAL · CVSS 9.8 EPSS 3.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-01-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-40722

Severity

CRITICAL

CVSS

9.8

EPSS

3.27%

Original NVD Description

AEM Forms Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by an XML External Entity (XXE) injection vulnerability that could be abused by an attacker to achieve RCE.