CVE-2021-21588

4.3 mediumEPSS 0.3%

Medium (4.3) in dell powerflex presentation server. EPSS 0.3% chance of exploitation in the next 30 days.

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-345
Published: 2021-07-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:powerflex_presentation_server

References

https://www.dell.com/support/kbdoc/000189265
https://www.dell.com/support/kbdoc/000189265

Check your stack JSON