CVE-2021-31794: Directum

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header.

Affected products

• Directum Directum: version 5.8.2 only

Published 2021-04-24. Last modified 2026-06-17.