CVE-2021-35451

MediumCVSS 6.1

Published: 07/07/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

49th percentile - higher than 49% of all known CVEs

Summary

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into the victim's browser via the web application.

Risk Assessment

An attacker can exploit this vulnerability to perform phishing attacks or session hijacking, compromising data confidentiality and integrity within the organization.

Recommendation

It is recommended to immediately update Teradici PCoIP Management Console-Enterprise to the latest version that fixes this vulnerability.

Original NVD description (English source)

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application.