VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Mar 1, 2021· Updated Jun 17, 2026

CVE-2021-21515

CVE-2021-21515

Description

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Dell/Emc Sourceone11 versions
    cpe:2.3:a:dell:emc_sourceone:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:dell:emc_sourceone:*:*:*:*:*:*:*:*range: <7.2
    • cpe:2.3:a:dell:emc_sourceone:7.2:-:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp1:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp2:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp3:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp4:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp5:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp6:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp7:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp8:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_sourceone:7.2:sp9:*:*:*:*:*:*
  • Dell/SourceOnellm-fuzzy2 versions
    <=7.2SP10+ 1 more
    • (no CPE)range: <=7.2SP10
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.