CVE-2021-30137: Axiossystems Assyst

High severity, CVSS 8.2. EPSS: 0.7% chance of exploitation in the next 30 days.

Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points.

Affected products

• Axiossystems Assyst: version 10 only

Published 2021-09-15. Last modified 2026-06-17.