CVE-2021-42545: Business-Dnasolutions Topease

Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days.

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.

Affected products

• Business-Dnasolutions Topease: up to and including 7.1.27

Published 2021-11-30. Last modified 2026-06-17.