CVE-2021-26711: Redwood REPORT2WEB

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter.

Affected products

• Redwood REPORT2WEB: version 4.3.4.5 only

Published 2021-02-05. Last modified 2026-06-17.