CVE-2021-33208

—

CVSS 3.1

7.2 high

EPSS

1%p65

Published

Mar 30, 2022 (Mar 30, 2022)

Modified

Jun 17, 2026

Description

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file.

Vendors: softwareag
Products: mashzone nextgen
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.