CVE-2021-38490: Altova Mobiletogether Server

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.

Affected products

• Altova Mobiletogether Server: from 7.0, before 7.3 (fixed in 7.3); version 7.3 only

Published 2021-08-10. Last modified 2026-06-17.