QSearchQSearch

CVE-2021-38490

7.5 HIGH

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425

Published: 2021-08-10 · Last updated: 2026-06-17

Severity and scoring

CVSS
7.5 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
CWE-776

Affected products

VendorProduct
altovamobiletogether_server

Description

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-45771 — FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implem... (7.5 HIGH)
  • CVE-2021-3541 — A flaw was found in libxml2 (6.5 MEDIUM)