CVE-2021-37425

PoC ×2—

CVSS 3.1

9.1 critical

EPSS

66%p99

Published

Aug 10, 2021 (Aug 10, 2021)

Modified

Jun 17, 2026

Description

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.

Vendors: altova
Products: mobiletogether server
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (66.3%)

In the news0 stories

No ingested article mentions this CVE yet.