Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_srs_policy_manager:6.6:*:*:*:*:*:*:*

part: a version: 6.6 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Srs Policy Manager (cf04e3a9-7e97-5d46-9276-764255f07fdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21517 vulnerable 2026-06-08 05:29:12.215266 Details available
HIGH (7.2)
SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service.
Published: 2021-03-01T20:25:14.681Z
Updated: 2024-09-17T00:25:38.048Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.