Vulnerabilities > CVE-2021-21517 - XXE vulnerability in Dell EMC SRS Policy Manager 6.6/6.8.3/6.9.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
PARTIAL Summary
SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |