← Database

CVE-2021-37425

CRITICAL CVSS: 9.1 Published: 2021-08-10 Modified: 2026-06-17

Description

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.

Affected Platforms

Altova Mobiletogether Server

Weakness Type

CWE-611

References