High severity7.2NVD Advisory· Published Mar 1, 2021· Updated Jun 17, 2026

CVE-2021-21517

Description

SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Emc Srs Policy Manager3 versions
cpe:2.3:a:dell:emc_srs_policy_manager:6.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dell:emc_srs_policy_manager:6.6:*:*:*:*:*:*:*
- cpe:2.3:a:dell:emc_srs_policy_manager:6.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:dell:emc_srs_policy_manager:6.9.0:*:*:*:*:*:*:*
EMC Corporation/SRS Policy Managerllm-create
Range: 6.X
Dell/EMC SCG Policy Managercpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000183576/dsa-2021-045-dell-emc-srs-policy-manager-security-update-for-external-entity-injection-vulnerabilitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000