CVE-2021-33207: Softwareag Mashzone NextGen

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code.

Affected products

• Softwareag Mashzone NextGen: up to and including 10.7

Published 2022-04-05. Last modified 2026-06-17.