CVE Feed

    Dashboard / CVE / CVE-2021-42535

    CVE-2021-42535

    VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage.

    Published:Jul 27, 2022
    Last Modified:Apr 17, 2025
    EPS:Jul 27, 2022
    EPSS Score:0.00196
    CVSS Score:5.3

    Affected Products

    Vendor
    Visam
    Product
    Vbase Web-remote

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-38417 (CVSS 7.4) — VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may a…
    CVE-2021-42537 (CVSS 5.9) — VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to…
    CVE-2020-10599 (CVSS 9.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be…
    CVE-2020-7000 (CVSS 7.5) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to disco…
    CVE-2020-10601 (CVSS 7.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure perm…
    CVE-2020-7004 (CVSS 8.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the …
    CVE-2020-7008 (CVSS 7.5) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High