CVE-2021-40089

2.3 lowEPSS 0.2%

Low (2.3) in primekey ejbca. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the System Configuration setting Enable External Script Access was disabled. With this setting disabled it's not possible to create new such publishers, but existing publishers would continue to run.

Severity

CVSS 3.1

2.3 low

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
Published: 2021-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

primekey:ejbca

References

https://support.primekey.com/news/posts/54
https://support.primekey.com/news/posts/54

Check your stack JSON