CVE-2021-22157

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-221587.2The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web CVE-2021-221597.8Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveICVE-2021-22166.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions CVE-2021-221609.8If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the token is not validaCVE-2021-221616.5In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected CVE-2021-221667.5An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed methodCVE-2021-221677.5An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attackerCVE-2021-221686.5A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8.CVE-2021-221694.3An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.CVE-2021-22174.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.CVE-2021-221707.5Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted contentCVE-2021-221716.5Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if th
CVE-2021-22157: Medium severity, CVSS 6.1 | Vulnix