What is CVE-2021-40683?

CVE-2021-40683 is a high-severity vulnerability in Akamai Enterprise Application Access, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2021-10-04.

How severe is CVE-2021-40683?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Akamai Enterprise Application Access

CVE-2021-40683

In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.

EPSS: 0.004 (35.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Akamai Enterprise_application_access
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

cve@mitre.org (Product, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)

Frequently asked questions

What is CVE-2021-40683?: CVE-2021-40683 is a high-severity vulnerability in Akamai Enterprise Application Access, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2021-10-04.
How severe is CVE-2021-40683?: High severity. CVSS v3 base score is 7.8 out of 10.