CVE-2021-30650

MEDIO 6.1CVE-2021-30650 · Published 18/02/2022 · updated 17/06/2026

In breve

CVE-2021-30650 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda layer7 api management oauth toolkit (broadcom).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.72%, superiore al 54.0% delle vulnerabilità.
Correzione: aggiornare a 4.4.1 o successiva.

Package	Affected versions	Patched versions
layer7 api management oauth toolkit broadcom	`< 4.4.1`	`4.4.1`

Description

A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into the OTK web UI client application.

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/CVE-2021-30650-Layer7-OAuth-Toolkit-OTK-/20170 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free