CVE-2021-45026

MediumCVSS 6.1

Published: 17/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.12%

62th percentile - higher than 62% of all known CVEs

ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS), allowing injection of malicious scripts.

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or steal sensitive data.

It is recommended to update to the latest version of ASG-Zena software and implement input and output filters for user data.

Original NVD description (English source)

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).