CVE-2021-38130

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	Voltage SecureMail Mail Relay.	All version prior to 7.3.0.1

References

Timeline

Published: Feb 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-381316.1Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.CVE-2021-381329.8Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2 CVE-2021-381336.5Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2 CVE-2021-381346.1Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.CVE-2021-381359.8Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.CVE-2021-381366.5Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splun CVE-2021-381378.1Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to pe CVE-2021-381385.4OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at CVE-2021-38147.5It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conc CVE-2021-381409.8The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after se CVE-2021-381428.8Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network CVE-2021-381436.1An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to l