CVE-2021-21517

HIGH 7.2CVE-2021-21517 · Published 01/03/2021 · updated 17/06/2026

In short

CVE-2021-21517 is a HIGH (CVSS 7.2) vulnerability affecting emc srs policy manager (dell).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
emc srs policy manager dell	`= 6.6= 6.8.3= 6.9.0`	No fix yet

Description

SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service.

References

dell.com/support/kbdoc/en-us/000183576/dsa-2021-045-dell-emc-srs-policy-manager-security-update-for-external-entity-injection-vulnerability · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free