CVE-2021-30137

8.2 highEPSS 0.7%

High (8.2) in axiossystems assyst. EPSS 0.7% chance of exploitation in the next 30 days.

Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points.

Severity

CVSS 3.1

8.2 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axiossystems:assyst

References

https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2021-30137.pdf
https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2021-30137.pdf

Check your stack JSON