CVE-2021-20707: nec corporation clusterpro x Improper Input Validation
Vulnerability summary
CVE-2021-20707 is a high (CVSS 7.5) Improper Input Validation vulnerability in nec corporation clusterpro x. EPSS estimates a 0.99% chance of exploitation in the next 30 days, higher than 61.7% of scored vulnerabilities.
Timeline
- 02-11-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to read files upload via network..
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.99%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
0.00 pp
From 0.99% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Nec4 products
- clusterpro_x≥ 1.0, ≤ 4.3
- clusterpro_x_singleserversafe≥ 1.0, ≤ 4.3
- expresscluster_x≥ 1.0, ≤ 4.3
- expresscluster_x_singleserversafe≥ 1.0, ≤ 4.3
Nec corporation1 product
- clusterpro xCLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier
2 vendors · 5 products
References
1 links- jpn.nec.com/security-info/secinfo/nv21-015_en.htmlX Refsource MISC