CVE-2021-40683: Akamai Enterprise Application Access

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.

Affected products

• Akamai Enterprise Application Access: before 2.3.1 (fixed in 2.3.1); from 2.4.0, before 2.4.1 (fixed in 2.4.1); from 2.5.0, before 2.5.3 (fixed in 2.5.3)

Published 2021-10-04. Last modified 2026-06-17.