CVE-2021-31589

MEDIUM 6.1CVE-2021-31589 · Published 05/01/2022 · updated 17/06/2026

In short

CVE-2021-31589 is a MEDIUM (CVSS 6.1) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 26.0%, higher than 98.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization.

References

packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.html · Exploit
cxsecurity.com/issue/WLB-2022010013 · Exploit
beyondtrust.com/docs/release-notes/index.htm · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free