CVE-2021-3333

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link.

• CWE-79

• https://community.opmantek.com/display/OA/Errata+-+4.0.1+XSS+in+SQL+debugging+outputPatch, Vendor Advisory
• https://community.opmantek.com/display/OA/Errata+-+4.0.1+XSS+in+SQL+debugging+outputPatch, Vendor Advisory

Published

Feb 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33323The Dynamic Data Mapping module in Liferay Portal 7.1.0 thro…7.5
• CVE-2021-33324The Layout module in Liferay Portal 7.1.0 through 7.3.1, and…4.3
• CVE-2021-33325The Portal Workflow module in Liferay Portal 7.3.2 and earli…4.9
• CVE-2021-33326Cross-site scripting (XSS) vulnerability in the Frontend JS …6.1
• CVE-2021-33327The Portlet Configuration module in Liferay Portal 7.2.0 thr…4.3
• CVE-2021-33328Cross-site scripting (XSS) vulnerability in the Asset module…5.4
• CVE-2021-33330Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 befo…4.3
• CVE-2021-33331Open redirect vulnerability in the Notifications module in L…6.1
• CVE-2021-33332Cross-site scripting (XSS) vulnerability in the Portlet Conf…6.1
• CVE-2021-33333The Portal Workflow module in Liferay Portal 7.3.2 and earli…6.3
• CVE-2021-33334The Dynamic Data Mapping module in Liferay Portal 7.0.0 thro…4.3
• CVE-2021-33335Privilege escalation vulnerability in Liferay Portal 7.0.3 t…7.2