CVE Feed

    Dashboard / CVE / CVE-2021-42537

    CVE-2021-42537

    VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

    Published:Jul 27, 2022
    Last Modified:Apr 17, 2025
    EPS:Jul 27, 2022
    EPSS Score:0.002
    CVSS Score:5.9

    Affected Products

    Vendor
    Visam
    Product
    Vbase Web-remote

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-221 Data Serialization External Entities Blowup

    Related CVEs

    CVE-2021-42535 (CVSS 5.3) — VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the…
    CVE-2021-38417 (CVSS 7.4) — VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may a…
    CVE-2020-10599 (CVSS 9.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be…
    CVE-2020-7000 (CVSS 7.5) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to disco…
    CVE-2020-10601 (CVSS 7.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure perm…
    CVE-2020-7004 (CVSS 8.8) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the …
    CVE-2020-7008 (CVSS 7.5) — VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High