CVE-2021-29725high

CVE-2021-29725: high-severity vulnerability in IBM Secure External Authentication Server

Published · Updated

Follow this CVE+ Monitor Secure Proxy+ Monitor Secure External Authentication Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.9%
IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources causing a denial of service due to a resource leak.
CVSS:3.0/AC:L/UI:N/PR:N/AV:N/S:U/I:N/C:N/A:H/RL:O/RC:C/E:U
Affected products
IBM · Secure External Authentication ServerIBM · Secure Proxy
Related CVEs — IBM Secure External Authentication Server

In the same product, most dangerous first.

CVE-2021-29726MEDIUMCVE-2021-29726EPSS 0.9%CVE-2021-29749MEDIUMCVE-2021-29749EPSS 0.8%CVE-2023-47147MEDIUMIBM Secure Proxy file manipulationEPSS 0.4%CVE-2023-46182MEDIUMIBM Secure Proxy cross-site scriptingEPSS 0.4%CVE-2023-47699MEDIUMIBM Secure Proxy cross-site scriptingEPSS 0.3%CVE-2023-47162MEDIUMIBM Secure Proxy cross-site scriptingEPSS 0.3%