CVE-2021-44207

HighCVSS 8.1/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Dec 21, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
Dec 23, 2024
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-442086.1OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat.CVE-2021-442096.1OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.CVE-2021-44214.3The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due toCVE-2021-442106.1OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.CVE-2021-442115.4OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.CVE-2021-442126.1OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.CVE-2021-442136.1OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message.CVE-2021-442155.5Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecifiCVE-2021-442165.5Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users toCVE-2021-442176.1In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer alCVE-2021-442199.8Gin-Vue-Admin before 2.4.6 mishandles a SQL database.CVE-2021-44224.3The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. This is due