CVE-2021-22891

9.8 criticalEPSS 1.1%

Critical (9.8) in citrix sharefile storagezones controller. EPSS 1.1% chance of exploitation in the next 30 days.

A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2021-05-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

citrix:sharefile_storagezones_controller

References

https://support.citrix.com/article/CTX310780
https://support.citrix.com/article/CTX310780

Check your stack JSON