GCVE - cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*

part: a version: 5.9.0 update: *

Vendor	Nsa (`ff9189df-f929-5eb3-8c24-633cf968186e`)
Product	Emissary (`8ace091b-f667-5a05-bd1a-e72aad27169d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/nationalsecurityagency/emissary`	purl2cpe	2026-06-01 10:17:18.235142

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-32096`	vulnerable	2026-06-08 05:31:54.687554	Details available The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter. Published: 2021-05-07T03:51:37.000Z Updated: 2024-08-03T23:17:29.176Z Open on db.gcve.eu Reference links https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32095`	vulnerable	2026-06-08 05:31:54.687258	Details available U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files. Published: 2021-05-07T03:51:47.000Z Updated: 2024-08-03T23:17:29.147Z Open on db.gcve.eu Reference links https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32094`	vulnerable	2026-06-08 05:31:54.686935	Details available U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files. Published: 2021-05-07T03:51:58.000Z Updated: 2024-08-03T23:17:29.123Z Open on db.gcve.eu Reference links https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32093`	vulnerable	2026-06-08 05:31:54.686425	Details available The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrary files via the ConfigName parameter. Published: 2021-05-07T03:52:07.000Z Updated: 2024-08-03T23:17:29.207Z Open on db.gcve.eu Reference links https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32092`	vulnerable	2026-06-08 05:31:54.686013	Details available A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter. Published: 2021-05-07T03:52:18.000Z Updated: 2024-08-03T23:17:29.178Z Open on db.gcve.eu Reference links https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.