CVE-2021-31589

A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization.

• CWE-79

• http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2022010013Exploit, Issue Tracking, Third Party Advisory
• https://www.beyondtrust.com/docs/release-notes/index.htmRelease Notes, Vendor Advisory
• http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2022010013Exploit, Issue Tracking, Third Party Advisory
• https://www.beyondtrust.com/docs/release-notes/index.htmRelease Notes, Vendor Advisory

Published

Jan 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31580The restricted shell provided by Akkadian Provisioning Manag…9.8
• CVE-2021-31581The restricted shell provided by Akkadian Provisioning Manag…4.4
• CVE-2021-31583Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including …5.4
• CVE-2021-31584Sipwise C5 NGCP www_csc version 3.6.4 up to and including pl…8.8
• CVE-2021-31585Accellion Kiteworks before 7.3.1 allows a user with Admin pr…6.7
• CVE-2021-31586Accellion Kiteworks before 7.4.0 allows an authenticated use…8.8
• CVE-2021-3159A stored cross site scripting (XSS) vulnerability in the /sy…5.4
• CVE-2021-31590PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect J…8.8
• CVE-2021-31597The xmlhttprequest-ssl package before 1.6.1 for Node.js disa…9.4
• CVE-2021-31598An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…7.5
• CVE-2021-31599An issue was discovered in Hitachi Vantara Pentaho through 9…8.8
• CVE-2021-3160Deserialization of untrusted data in the login page of ASSUW…9.8