CVE-2021-33231: Easyvista Service Manager

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field.

Affected products

• Easyvista Service Manager: version 2018.1.181.1 only

Published 2022-10-20. Last modified 2026-07-09.