CVE-2021-3003: Agenziaentrate Desktop Telematico

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Agenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over cleartext HTTP, which allows man-in-the-middle attackers to spoof product updates.

Affected products

• Agenziaentrate Desktop Telematico: version 1.0.0 only

Published 2021-05-10. Last modified 2026-06-17.