VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 13, 2022· Updated Jun 17, 2026

CVE-2021-46827

CVE-2021-46827

Description

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

41
  • Sync/Oxygen Publishing Engine7 versions
    cpe:2.3:a:sync:oxygen_publishing_engine:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:sync:oxygen_publishing_engine:*:*:*:*:*:*:*:*range: <22.1
    • cpe:2.3:a:sync:oxygen_publishing_engine:22.1:2020061014:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_publishing_engine:22.1:2020072823:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_publishing_engine:22.1:2020100801:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_publishing_engine:22.1:2020121711:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_publishing_engine:23.1:2021040717:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_publishing_engine:23.1:2021060401:*:*:*:*:*:*
  • Sync/Oxygen XML Author8 versions
    cpe:2.3:a:sync:oxygen_xml_author:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sync:oxygen_xml_author:*:*:*:*:*:*:*:*range: <22.1
    • cpe:2.3:a:sync:oxygen_xml_author:22.1:2020061102:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_author:22.1:2020072902:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_author:22.1:2020100710:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_author:22.1:2020121713:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_author:23.1:2021030206:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_author:23.1:2021040908:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_author:23.1:2021061407:*:*:*:*:*:*
  • Sync/Oxygen XML Developer8 versions
    cpe:2.3:a:sync:oxygen_xml_developer:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sync:oxygen_xml_developer:*:*:*:*:*:*:*:*range: <22.1
    • cpe:2.3:a:sync:oxygen_xml_developer:22.1:2020061102:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_developer:22.1:2020072902:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_developer:22.1:2020100710:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_developer:22.1:2020121713:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_developer:23.1:2021030206:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_developer:23.1:2021040908:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_developer:23.1:2021061407:*:*:*:*:*:*
  • Sync/Oxygen XML Editor8 versions
    cpe:2.3:a:sync:oxygen_xml_editor:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sync:oxygen_xml_editor:*:*:*:*:*:*:*:*range: <22.1
    • cpe:2.3:a:sync:oxygen_xml_editor:22.1:2020061102:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_editor:22.1:2020072902:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_editor:22.1:2020100710:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_editor:22.1:2020121713:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_editor:23.1:2021030206:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_editor:23.1:2021040908:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_editor:23.1:2021061407:*:*:*:*:*:*
  • Sync/Oxygen XML Webhelp8 versions
    cpe:2.3:a:sync:oxygen_xml_webhelp:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:sync:oxygen_xml_webhelp:*:*:*:*:*:*:*:*range: <22.1
    • cpe:2.3:a:sync:oxygen_xml_webhelp:22.1:2020061014:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_webhelp:22.1:2020072412:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_webhelp:22.1:2020100208:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_webhelp:22.1:2020121713:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_webhelp:23.1:2021030210:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_webhelp:23.1:2021040711:*:*:*:*:*:*
    • cpe:2.3:a:sync:oxygen_xml_webhelp:23.1:2021060306:*:*:*:*:*:*
  • Oxygen/XML WebHelpdescription
  • Oxygen XML/Oxygen XML WebHelpllm-create
    Range: <22.1 build 2021082006, <23.1 build 2021090310

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.