VULNERABILITY INTELLIGENCE

CVE-2021-32092

CVSS score6.1 MEDIUM

EPSS probability0.95%

CISA KEVNot currently listed

Published2021-05-07

Last modified2026-06-17

Description

A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter.