CVE-2021-3824

6.1 mediumEPSS 0.7%

Medium (6.1) in openvpn openvpn access server. EPSS 0.7% chance of exploitation in the next 30 days.

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-84
Published: 2021-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19