CVE-2021-3191

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://idelji.comProduct
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04081en_usVendor Advisory
https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=IdeljiVendor Advisory
https://idelji.comProduct
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04081en_usVendor Advisory
https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=IdeljiVendor Advisory

Timeline

Published: Feb 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-319107.5In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.CVE-2021-319116.1In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.CVE-2021-319128.8In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.CVE-2021-319137.5In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.CVE-2021-319149.8In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.CVE-2021-319159.8In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.CVE-2021-319166.7An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux k CVE-2021-319179.8A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass au CVE-2021-319187.5A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack CVE-2021-319197.5An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may conta CVE-2021-319206.5Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escap CVE-2021-319219.8Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected servi