CVE-2021-33208: softwareag mashzone_nextgen
Vulnerability summary
CVE-2021-33208 is a high (CVSS 7.2) vulnerability in softwareag mashzone_nextgen. EPSS estimates a 1.15% chance of exploitation in the next 30 days, higher than 66.9% of scored vulnerabilities.
Not severe (CVSS 7.2, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 30-03-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.15%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.15% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Softwareag1 product
- mashzone_nextgen≤ 10.7
1 vendor · 1 product
References
2 links- www.softwareag.com/corporate/products/az/mashzone_nextgen/defaultX Refsource MISCProductVendor Advisory
- github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33208X Refsource MISCThird Party Advisory