CVE-2021-42856

6.1 mediumEPSS 0.6%

Medium (6.1) in riverbed steelcentral appinternals dynamic sampling agent. EPSS 0.6% chance of exploitation in the next 30 days.

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-20
Published: 2022-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

riverbed:steelcentral_appinternals_dynamic_sampling_agent

References

https://aternity.force.com/customersuccess/s/article/Reflected-Cross-site-Scripting-at-DsaDataTest-CVE-2021-42856
https://aternity.force.com/customersuccess/s/article/Reflected-Cross-site-Scripting-at-DsaDataTest-CVE-2021-42856

Check your stack JSON