CVE-2021-33523: Softwareag Mashzone NextGen

High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days.

MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController.

Affected products

• Softwareag Mashzone NextGen: up to and including 10.7

Published 2022-03-30. Last modified 2026-06-17.