# Vulnerabilities published in 2021


- [CVE-2021-21562](https://insights.sbomify.com/CVE-2021-21562/): Privilege escalation in PowerScale OneFS (medium 4.4)
- [CVE-2021-21561](https://insights.sbomify.com/CVE-2021-21561/): Information disclosure in PowerScale OneFS (high 7.8)
- [CVE-2021-2156](https://insights.sbomify.com/CVE-2021-2156/): Other in Customers Online (high 8.1)
- [CVE-2021-21559](https://insights.sbomify.com/CVE-2021-21559/): Weak cryptography in NetWorker (high 7.1)
- [CVE-2021-21558](https://insights.sbomify.com/CVE-2021-21558/): Information disclosure in NetWorker (high 8.2)
- [CVE-2021-21557](https://insights.sbomify.com/CVE-2021-21557/): Memory corruption in PowerEdge BIOS Intel 15G (high 8.1)
- [CVE-2021-21556](https://insights.sbomify.com/CVE-2021-21556/): Memory corruption in PowerEdge BIOS Intel 15G (medium 6.1)
- [CVE-2021-21555](https://insights.sbomify.com/CVE-2021-21555/): Memory corruption in PowerEdge BIOS Intel 15G (medium 6.1)
- [CVE-2021-21554](https://insights.sbomify.com/CVE-2021-21554/): Memory corruption in PowerEdge BIOS Intel 15G (medium 6.1)
- [CVE-2021-21553](https://insights.sbomify.com/CVE-2021-21553/): Privilege escalation in PowerScale OneFS (high 7.3)
- [CVE-2021-21552](https://insights.sbomify.com/CVE-2021-21552/): Privilege escalation in Wyse Windows Embedded (WES) (medium 5.2)
- [CVE-2021-21551](https://insights.sbomify.com/CVE-2021-21551/): Dell dbutil Driver Insufficient Access Control (high 8.8, exploited in the wild)
- [CVE-2021-21550](https://insights.sbomify.com/CVE-2021-21550/): Command injection in PowerScale OneFS (medium 6.0)
- [CVE-2021-2155](https://insights.sbomify.com/CVE-2021-2155/): Other in One-to-One Fulfillment (medium 4.3)
- [CVE-2021-21549](https://insights.sbomify.com/CVE-2021-21549/): Cross-site request forgery in XtremIO (high 8.8)
- [CVE-2021-21548](https://insights.sbomify.com/CVE-2021-21548/): Security feature bypass in Unisphere for PowerMax, Dell EMC Unisphere for PowerMax Virtual Appliance , PowerMax OS (high 7.4)
- [CVE-2021-21547](https://insights.sbomify.com/CVE-2021-21547/): Information disclosure in Unity (medium 6.4)
- [CVE-2021-21546](https://insights.sbomify.com/CVE-2021-21546/): Information disclosure in NetWorker (high 7.8)
- [CVE-2021-21545](https://insights.sbomify.com/CVE-2021-21545/): Privilege escalation in Dell Peripheral Manager (high 7.8)
- [CVE-2021-21544](https://insights.sbomify.com/CVE-2021-21544/): Auth bypass in Integrated Dell Remote Access Controller (iDRAC) (low 2.7)
- [CVE-2021-21543](https://insights.sbomify.com/CVE-2021-21543/): Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC) (medium 4.8)
- [CVE-2021-21542](https://insights.sbomify.com/CVE-2021-21542/): Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC) (medium 4.8)
- [CVE-2021-21541](https://insights.sbomify.com/CVE-2021-21541/): Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC) (medium 6.1)
- [CVE-2021-21540](https://insights.sbomify.com/CVE-2021-21540/): Memory corruption in Integrated Dell Remote Access Controller (iDRAC) (medium 5.9)
- [CVE-2021-2154](https://insights.sbomify.com/CVE-2021-2154/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-21539](https://insights.sbomify.com/CVE-2021-21539/): Race condition in Integrated Dell Remote Access Controller (iDRAC) (medium 5.9)
- [CVE-2021-21538](https://insights.sbomify.com/CVE-2021-21538/): Auth bypass in Integrated Dell Remote Access Controller (iDRAC) (critical 9.6)
- [CVE-2021-21537](https://insights.sbomify.com/CVE-2021-21537/): Information disclosure in Dell Hybrid Client (DHC) (medium 6.2)
- [CVE-2021-21536](https://insights.sbomify.com/CVE-2021-21536/): Information disclosure in Dell Hybrid Client (DHC) (medium 6.2)
- [CVE-2021-21535](https://insights.sbomify.com/CVE-2021-21535/): Auth bypass in Dell Hybrid Client (DHC) (high 7.4)
- [CVE-2021-21534](https://insights.sbomify.com/CVE-2021-21534/): Information disclosure in Dell Hybrid Client (DHC) (medium 4.0)
- [CVE-2021-21533](https://insights.sbomify.com/CVE-2021-21533/): Denial of service in Wyse Management Suite (medium 4.3)
- [CVE-2021-21532](https://insights.sbomify.com/CVE-2021-21532/): Other in Wyse Proprietary OS (ThinOS) (medium 5.0)
- [CVE-2021-21531](https://insights.sbomify.com/CVE-2021-21531/): Missing authorization in Unisphere for PowerMax (high 8.1)
- [CVE-2021-21530](https://insights.sbomify.com/CVE-2021-21530/): Command injection in OpenManage Enterprise (high 8.3)
- [CVE-2021-2153](https://insights.sbomify.com/CVE-2021-2153/): Other in Internet Expenses (medium 4.3)
- [CVE-2021-21529](https://insights.sbomify.com/CVE-2021-21529/): Denial of service in DellEMC System Update - DSU (low 3.8)
- [CVE-2021-21528](https://insights.sbomify.com/CVE-2021-21528/): Information disclosure in PowerScale OneFS (high 7.5)
- [CVE-2021-21527](https://insights.sbomify.com/CVE-2021-21527/): Command injection in PowerScale OneFS (medium 6.0)
- [CVE-2021-21526](https://insights.sbomify.com/CVE-2021-21526/): Command injection in PowerScale OneFS (medium 6.0)
- [CVE-2021-21524](https://insights.sbomify.com/CVE-2021-21524/): Deserialization in Dell EMC Storage Monitoring and Reporting (critical 9.8)
- [CVE-2021-21522](https://insights.sbomify.com/CVE-2021-21522/): Information disclosure in CPG BIOS (high 8.2)
- [CVE-2021-2152](https://insights.sbomify.com/CVE-2021-2152/): Other in Business Intelligence Enterprise Edition (medium 4.0)
- [CVE-2021-21518](https://insights.sbomify.com/CVE-2021-21518/): Privilege escalation in Dell SupportAssist Client (high 7.8)
- [CVE-2021-21517](https://insights.sbomify.com/CVE-2021-21517/): XML external entity in SRS Policy Manager (high 7.2)
- [CVE-2021-21515](https://insights.sbomify.com/CVE-2021-21515/): Cross-site scripting in SourceOne (critical 9.0)
- [CVE-2021-21514](https://insights.sbomify.com/CVE-2021-21514/): Path traversal in Dell Open Manage Server Administrator (medium 4.9)
- [CVE-2021-21513](https://insights.sbomify.com/CVE-2021-21513/): Auth bypass in Dell Open Manage Server Administrator (high 8.6)
- [CVE-2021-21512](https://insights.sbomify.com/CVE-2021-21512/): Information disclosure in Cyber Recovery (high 7.9)
- [CVE-2021-21511](https://insights.sbomify.com/CVE-2021-21511/): Missing authorization in Avamar (high 8.1)
- [CVE-2021-21510](https://insights.sbomify.com/CVE-2021-21510/): Other in Integrated Dell Remote Access Controller (iDRAC) (medium 6.1)
- [CVE-2021-2151](https://insights.sbomify.com/CVE-2021-2151/): Other in PeopleSoft Enterprise PT PeopleTools (medium 6.7)
- [CVE-2021-21508](https://insights.sbomify.com/CVE-2021-21508/): Information disclosure in VxRail (medium 6.7)
- [CVE-2021-21507](https://insights.sbomify.com/CVE-2021-21507/): Weak cryptography in VRTX Switch Modules (high 8.8)
- [CVE-2021-21506](https://insights.sbomify.com/CVE-2021-21506/): Privilege escalation in PowerScale OneFS (high 8.8)
- [CVE-2021-21505](https://insights.sbomify.com/CVE-2021-21505/): Hardcoded credentials in Dell EMC Integrated System for Microsoft Azure Stack Hub (high 8.0)
- [CVE-2021-21503](https://insights.sbomify.com/CVE-2021-21503/): Command injection in PowerScale OneFS (high 7.8)
- [CVE-2021-21502](https://insights.sbomify.com/CVE-2021-21502/): Auth bypass in PowerScale OneFS (critical 9.8)
- [CVE-2021-21501](https://insights.sbomify.com/CVE-2021-21501/): ServiceComb ServiceCenter Directory Traversal (high 7.5)
- [CVE-2021-2150](https://insights.sbomify.com/CVE-2021-2150/): Other in iStore (high 8.2)
- [CVE-2021-21495](https://insights.sbomify.com/CVE-2021-21495/): Cross-site request forgery in mk-auth:mk-auth (high 8.8)
- [CVE-2021-21494](https://insights.sbomify.com/CVE-2021-21494/): Cross-site scripting in mk-auth:mk-auth (medium 4.8)
- [CVE-2021-21493](https://insights.sbomify.com/CVE-2021-21493/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-21492](https://insights.sbomify.com/CVE-2021-21492/): Auth bypass in SAP NetWeaver AS for JAVA (HTTP Service) (medium 4.3)
- [CVE-2021-21491](https://insights.sbomify.com/CVE-2021-21491/): Open redirect in SAP NetWeaver Application Server Java (Applications based on Web Dynpro Java) (medium 4.7)
- [CVE-2021-21490](https://insights.sbomify.com/CVE-2021-21490/): Cross-site scripting in SAP NetWeaver AS for ABAP (Web Survey) (medium 6.1)
- [CVE-2021-2149](https://insights.sbomify.com/CVE-2021-2149/): Other in Sun ZFS Storage Appliance Kit (AK) Software (low 2.5)
- [CVE-2021-21489](https://insights.sbomify.com/CVE-2021-21489/): Cross-site scripting in SAP NetWeaver Enterprise Portal (medium 4.8)
- [CVE-2021-21488](https://insights.sbomify.com/CVE-2021-21488/): Deserialization in SAP NetWeaver Knowledge Management (medium 6.5)
- [CVE-2021-21487](https://insights.sbomify.com/CVE-2021-21487/): Missing authorization in SAP Payment Engine (medium 6.8)
- [CVE-2021-21486](https://insights.sbomify.com/CVE-2021-21486/): Missing authorization in SAP Enterprise Financial Services (Bank Customer Accounts) (medium 6.8)
- [CVE-2021-21485](https://insights.sbomify.com/CVE-2021-21485/): Information disclosure in SAP NetWeaver AS for JAVA (Telnet Commands) (high 7.4)
- [CVE-2021-21484](https://insights.sbomify.com/CVE-2021-21484/): Auth bypass in SAP HANA (high 7.7)
- [CVE-2021-21483](https://insights.sbomify.com/CVE-2021-21483/): Information disclosure in SAP Solution Manager (high 8.2)
- [CVE-2021-21482](https://insights.sbomify.com/CVE-2021-21482/): Weak cryptography in SAP NetWeaver Master Data Management (high 8.3)
- [CVE-2021-21481](https://insights.sbomify.com/CVE-2021-21481/): Missing authorization in SAP NetWeaver AS JAVA (MigrationService) (critical 9.6)
- [CVE-2021-21480](https://insights.sbomify.com/CVE-2021-21480/): Code injection in SAP Manufacturing Integration and Intelligence (critical 9.9)
- [CVE-2021-21479](https://insights.sbomify.com/CVE-2021-21479/): Remote Code Execution in SCIMono (high 8.1)
- [CVE-2021-21478](https://insights.sbomify.com/CVE-2021-21478/): Open redirect in SAP NetWeaver AS ABAP (Web Dynpro ABAP) (medium 4.7)
- [CVE-2021-21477](https://insights.sbomify.com/CVE-2021-21477/): Code injection in SAP Commerce (critical 9.9)
- [CVE-2021-21476](https://insights.sbomify.com/CVE-2021-21476/): Open redirect in SAP UI5 (medium 4.7)
- [CVE-2021-21475](https://insights.sbomify.com/CVE-2021-21475/): Path traversal in SAP NetWeaver Master Data Management Server (medium 6.8)
- [CVE-2021-21474](https://insights.sbomify.com/CVE-2021-21474/): Weak cryptography in SAP HANA Database (medium 6.5)
- [CVE-2021-21473](https://insights.sbomify.com/CVE-2021-21473/): Missing authorization in SAP NetWeaver AS ABAP and ABAP Platform (SRM RFC SUBMIT REPORT) (medium 6.3)
- [CVE-2021-21472](https://insights.sbomify.com/CVE-2021-21472/): Misconfiguration in SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) (medium 6.3)
- [CVE-2021-21471](https://insights.sbomify.com/CVE-2021-21471/): Missing authorization in CLA-Assistant (medium 6.5)
- [CVE-2021-21470](https://insights.sbomify.com/CVE-2021-21470/): XML external entity in SAP EPM Add-in for Microsoft Office (low 3.6)
- [CVE-2021-2147](https://insights.sbomify.com/CVE-2021-2147/): Other in Sun ZFS Storage Appliance Kit (AK) Software (low 1.8)
- [CVE-2021-21469](https://insights.sbomify.com/CVE-2021-21469/): Misconfiguration in SAP NetWeaver Master Data Management (medium 5.3)
- [CVE-2021-21468](https://insights.sbomify.com/CVE-2021-21468/): Missing authorization in SAP Business Warehouse (medium 6.5)
- [CVE-2021-21467](https://insights.sbomify.com/CVE-2021-21467/): Missing authorization in SAP Banking Services (Generic Market Data) (medium 4.3)
- [CVE-2021-21466](https://insights.sbomify.com/CVE-2021-21466/): Code injection in SAP BW/4HANA (critical 9.9)
- [CVE-2021-21465](https://insights.sbomify.com/CVE-2021-21465/): SQL injection in SAP Business Warehouse (critical 9.9)
- [CVE-2021-21464](https://insights.sbomify.com/CVE-2021-21464/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-21463](https://insights.sbomify.com/CVE-2021-21463/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-21462](https://insights.sbomify.com/CVE-2021-21462/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-21461](https://insights.sbomify.com/CVE-2021-21461/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-21460](https://insights.sbomify.com/CVE-2021-21460/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-2146](https://insights.sbomify.com/CVE-2021-2146/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-21459](https://insights.sbomify.com/CVE-2021-21459/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/237/