CVE-2021-21515: Dell Emc Sourceone

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.

Affected products

• Dell Emc Sourceone: before 7.2 (fixed in 7.2); version 7.2 only

Published 2021-03-01. Last modified 2026-06-17.