# Vulnerabilities published in 2021


- [CVE-2021-21084](https://insights.sbomify.com/CVE-2021-21084/): Cross-site scripting in Experience Manager (high 7.3)
- [CVE-2021-21083](https://insights.sbomify.com/CVE-2021-21083/): Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-service (high 7.5)
- [CVE-2021-21082](https://insights.sbomify.com/CVE-2021-21082/): Adobe Photoshop Memory Corruption (high 7.8)
- [CVE-2021-21080](https://insights.sbomify.com/CVE-2021-21080/): Adobe Connect Reflected Cross-site Scripting via query parameter (medium 6.1)
- [CVE-2021-2108](https://insights.sbomify.com/CVE-2021-2108/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-21079](https://insights.sbomify.com/CVE-2021-21079/): Adobe Connect Reflected Cross-site Scripting via archiveOffset parameter (medium 6.1)
- [CVE-2021-21078](https://insights.sbomify.com/CVE-2021-21078/): Adobe Creative Cloud Unquoted Service Path in CCXProcess (medium 6.5)
- [CVE-2021-21077](https://insights.sbomify.com/CVE-2021-21077/): Adobe Animate heap-based overflow vulnerability (high 7.8)
- [CVE-2021-21076](https://insights.sbomify.com/CVE-2021-21076/): Adobe Animate out-of-bounds read vulnerability (high 7.1)
- [CVE-2021-21075](https://insights.sbomify.com/CVE-2021-21075/): Adobe Animate out-of-bounds read vulnerability (high 7.1)
- [CVE-2021-21074](https://insights.sbomify.com/CVE-2021-21074/): Adobe Animate out-of-bounds read vulnerability (high 7.1)
- [CVE-2021-21073](https://insights.sbomify.com/CVE-2021-21073/): Adobe Animate out-of-bounds read vulnerability (high 7.1)
- [CVE-2021-21072](https://insights.sbomify.com/CVE-2021-21072/): Adobe Animate out-of-bounds read vulnerability (high 7.1)
- [CVE-2021-21071](https://insights.sbomify.com/CVE-2021-21071/): Adobe Animate memory corruption vulnerability (high 7.8)
- [CVE-2021-21070](https://insights.sbomify.com/CVE-2021-21070/): Privilege Escalation Vulnerability in Adobe RoboHelp (medium 6.5)
- [CVE-2021-2107](https://insights.sbomify.com/CVE-2021-2107/): Other in Customer Interaction History (high 8.2)
- [CVE-2021-21069](https://insights.sbomify.com/CVE-2021-21069/): Adobe Creative Cloud Privilege Escalation Vulnerability (high 7.8)
- [CVE-2021-21068](https://insights.sbomify.com/CVE-2021-21068/): Adobe Creative Cloud installer arbitrary file overwrite vulnerability (medium 6.1)
- [CVE-2021-21067](https://insights.sbomify.com/CVE-2021-21067/): Adobe Photoshop CoolType arbitrary stack manipulation in Type 1/Multiple Master (high 7.8)
- [CVE-2021-21066](https://insights.sbomify.com/CVE-2021-21066/): Adobe Bridge Font Parsing Out-Of-Bounds Write Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2021-21065](https://insights.sbomify.com/CVE-2021-21065/): Adobe Bridge Font Parsing Out-Of-Bounds Write Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2021-21064](https://insights.sbomify.com/CVE-2021-21064/): Magento UPWARD-php Path traversal vulnerability via UPWARD Connector (medium 4.9)
- [CVE-2021-21063](https://insights.sbomify.com/CVE-2021-21063/): Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-21062](https://insights.sbomify.com/CVE-2021-21062/): Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21061](https://insights.sbomify.com/CVE-2021-21061/): Acrobat Pro DC Use-After-Free Vulnerability Could Lead to Information Disclosure (low 3.3)
- [CVE-2021-21060](https://insights.sbomify.com/CVE-2021-21060/): Acrobat Pro DC Improper File Parsing Could Lead to Information Disclosure (medium 4.6)
- [CVE-2021-2106](https://insights.sbomify.com/CVE-2021-2106/): Other in Customer Interaction History (high 8.2)
- [CVE-2021-21059](https://insights.sbomify.com/CVE-2021-21059/): Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-21058](https://insights.sbomify.com/CVE-2021-21058/): Acrobat Reader DC Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-21057](https://insights.sbomify.com/CVE-2021-21057/): Acrobat Reader DC Invalid Memory Read Due To An Uninitialized Pointer (medium 6.6)
- [CVE-2021-21056](https://insights.sbomify.com/CVE-2021-21056/): Adobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code Execution (high 7.8)
- [CVE-2021-21055](https://insights.sbomify.com/CVE-2021-21055/): Adobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information Disclosure (medium 6.2)
- [CVE-2021-21054](https://insights.sbomify.com/CVE-2021-21054/): Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-21053](https://insights.sbomify.com/CVE-2021-21053/): Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution (high 7.8)
- [CVE-2021-21052](https://insights.sbomify.com/CVE-2021-21052/): Adobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21051](https://insights.sbomify.com/CVE-2021-21051/): Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-21050](https://insights.sbomify.com/CVE-2021-21050/): Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-2105](https://insights.sbomify.com/CVE-2021-2105/): Other in Customer Interaction History (high 8.2)
- [CVE-2021-21049](https://insights.sbomify.com/CVE-2021-21049/): Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-21048](https://insights.sbomify.com/CVE-2021-21048/): Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-21047](https://insights.sbomify.com/CVE-2021-21047/): Adobe Photoshop Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution (high 7.8)
- [CVE-2021-21046](https://insights.sbomify.com/CVE-2021-21046/): Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution (low 3.3)
- [CVE-2021-21045](https://insights.sbomify.com/CVE-2021-21045/): Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation (high 8.2)
- [CVE-2021-21044](https://insights.sbomify.com/CVE-2021-21044/): Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21043](https://insights.sbomify.com/CVE-2021-21043/): Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools (medium 6.1)
- [CVE-2021-21042](https://insights.sbomify.com/CVE-2021-21042/): Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-21041](https://insights.sbomify.com/CVE-2021-21041/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21040](https://insights.sbomify.com/CVE-2021-21040/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-2104](https://insights.sbomify.com/CVE-2021-2104/): Other in Complex Maintenance, Repair, and Overhaul (high 8.2)
- [CVE-2021-21039](https://insights.sbomify.com/CVE-2021-21039/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21038](https://insights.sbomify.com/CVE-2021-21038/): Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21037](https://insights.sbomify.com/CVE-2021-21037/): Acrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21036](https://insights.sbomify.com/CVE-2021-21036/): Acrobat Reader DC Integer Overflow Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-21035](https://insights.sbomify.com/CVE-2021-21035/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 8.8)
- [CVE-2021-21034](https://insights.sbomify.com/CVE-2021-21034/): Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-21033](https://insights.sbomify.com/CVE-2021-21033/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 8.8)
- [CVE-2021-21032](https://insights.sbomify.com/CVE-2021-21032/): Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access (medium 5.6)
- [CVE-2021-21031](https://insights.sbomify.com/CVE-2021-21031/): Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access (medium 5.6)
- [CVE-2021-21030](https://insights.sbomify.com/CVE-2021-21030/): Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution (high 8.1)
- [CVE-2021-2103](https://insights.sbomify.com/CVE-2021-2103/): Other in Complex Maintenance, Repair, and Overhaul (high 8.2)
- [CVE-2021-21029](https://insights.sbomify.com/CVE-2021-21029/): Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution (medium 4.8)
- [CVE-2021-21028](https://insights.sbomify.com/CVE-2021-21028/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 8.8)
- [CVE-2021-21027](https://insights.sbomify.com/CVE-2021-21027/): Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification (medium 4.3)
- [CVE-2021-21026](https://insights.sbomify.com/CVE-2021-21026/): Magento Commerce Incorrect permissions Could Lead To Unauthorized Access (medium 5.3)
- [CVE-2021-21025](https://insights.sbomify.com/CVE-2021-21025/): Magento Commerce XML Injection Could Lead To Arbitrary Code Execution (critical 9.1)
- [CVE-2021-21024](https://insights.sbomify.com/CVE-2021-21024/): Magento Commerce Blind SQL Injection Could Lead To Unauthorized Access (critical 9.1)
- [CVE-2021-21023](https://insights.sbomify.com/CVE-2021-21023/): Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution (medium 4.8)
- [CVE-2021-21022](https://insights.sbomify.com/CVE-2021-21022/): Magento Commerce Incorrect permissions Could Lead To Unauthorized Access (medium 5.3)
- [CVE-2021-21021](https://insights.sbomify.com/CVE-2021-21021/): Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution (high 8.8)
- [CVE-2021-21020](https://insights.sbomify.com/CVE-2021-21020/): Magento Commerce Improper Access Control Vulnerability (medium 5.3)
- [CVE-2021-2102](https://insights.sbomify.com/CVE-2021-2102/): Other in Complex Maintenance, Repair, and Overhaul (high 8.2)
- [CVE-2021-21019](https://insights.sbomify.com/CVE-2021-21019/): Magento Commerce XML Injection Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-21018](https://insights.sbomify.com/CVE-2021-21018/): Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution (critical 9.1)
- [CVE-2021-21017](https://insights.sbomify.com/CVE-2021-21017/): Adobe Acrobat and Reader Heap-based Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-21016](https://insights.sbomify.com/CVE-2021-21016/): Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution (critical 9.1)
- [CVE-2021-21015](https://insights.sbomify.com/CVE-2021-21015/): Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution (high 8.0)
- [CVE-2021-21014](https://insights.sbomify.com/CVE-2021-21014/): Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution (critical 9.1)
- [CVE-2021-21013](https://insights.sbomify.com/CVE-2021-21013/): Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure (high 8.1)
- [CVE-2021-21012](https://insights.sbomify.com/CVE-2021-21012/): Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure (medium 5.3)
- [CVE-2021-21011](https://insights.sbomify.com/CVE-2021-21011/): Uncontrolled Search Path Element in Adobe Captivate 2019 (high 7.0)
- [CVE-2021-21010](https://insights.sbomify.com/CVE-2021-21010/): Uncontrolled search path element in Adobe InCopy (high 7.0)
- [CVE-2021-2101](https://insights.sbomify.com/CVE-2021-2101/): Other in One-to-One Fulfillment (critical 9.1)
- [CVE-2021-21009](https://insights.sbomify.com/CVE-2021-21009/): Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure (high 8.6)
- [CVE-2021-21008](https://insights.sbomify.com/CVE-2021-21008/): Uncontrolled Search Path Element vulnerability in Animate 21.0 (high 7.0)
- [CVE-2021-21007](https://insights.sbomify.com/CVE-2021-21007/): Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code execution (high 7.0)
- [CVE-2021-21006](https://insights.sbomify.com/CVE-2021-21006/): Heap buffer overflow when handling crafted font file could lead to arbitrary code execution (high 8.6)
- [CVE-2021-21005](https://insights.sbomify.com/CVE-2021-21005/): Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products (high 7.5)
- [CVE-2021-21004](https://insights.sbomify.com/CVE-2021-21004/): Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products (high 7.4)
- [CVE-2021-21003](https://insights.sbomify.com/CVE-2021-21003/): Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products (medium 5.3)
- [CVE-2021-21002](https://insights.sbomify.com/CVE-2021-21002/): Denial of Service in Phoenix Contact FL COMSERVER UNI products (high 7.5)
- [CVE-2021-21001](https://insights.sbomify.com/CVE-2021-21001/): WAGO: PFC200 Access to files outside the home directory (critical 9.1)
- [CVE-2021-21000](https://insights.sbomify.com/CVE-2021-21000/): WAGO: PFC200 Denial of Service due to the number of connections to the runtime (medium 5.3)
- [CVE-2021-2100](https://insights.sbomify.com/CVE-2021-2100/): Other in One-to-One Fulfillment (critical 9.1)
- [CVE-2021-20999](https://insights.sbomify.com/CVE-2021-20999/): WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways (critical 9.4)
- [CVE-2021-20998](https://insights.sbomify.com/CVE-2021-20998/): WAGO: Managed Switches: Unauthorized creation of user accounts (critical 10.0)
- [CVE-2021-20997](https://insights.sbomify.com/CVE-2021-20997/): WAGO: Managed Switches: Unauthorized access to password hashes (high 7.5)
- [CVE-2021-20996](https://insights.sbomify.com/CVE-2021-20996/): WAGO: Managed Switches: Unsecure Cookie settings (medium 5.3)
- [CVE-2021-20995](https://insights.sbomify.com/CVE-2021-20995/): WAGO: Managed Switches: Storage of user credentials in a cookie (medium 5.3)
- [CVE-2021-20994](https://insights.sbomify.com/CVE-2021-20994/): WAGO: Managed Switches: Reflected Cross-site Scripting (high 8.8)
- [CVE-2021-20993](https://insights.sbomify.com/CVE-2021-20993/): WAGO: Managed Switches: Exposure of sensitive information through directory listing (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/242/