CVE-2021-21957: Dreamreport Remote Connector

High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days.

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

• Dreamreport Remote Connector: version 20.2.16900.0 only

Published 2021-12-08. Last modified 2026-06-17.