CVE-2021-44916

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser.

• CWE-79

• http://packetstormsecurity.com/files/165502/Open-AudIT-Community-4.2.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://community.opmantek.com/display/OA/Errata+-+4.2.0+and+earlier+Javascript+vulnerabilityMitigation, Patch, Vendor Advisory
• https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v4.3.0Release Notes, Vendor Advisory
• https://github.com/Opmantek/open-audit/commit/e37b64bbd0219f03cb71cc1cd5bb010166a2b846Patch, Third Party Advisory
• http://packetstormsecurity.com/files/165502/Open-AudIT-Community-4.2.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://community.opmantek.com/display/OA/Errata+-+4.2.0+and+earlier+Javascript+vulnerabilityMitigation, Patch, Vendor Advisory
• https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v4.3.0Release Notes, Vendor Advisory
• https://github.com/Opmantek/open-audit/commit/e37b64bbd0219f03cb71cc1cd5bb010166a2b846Patch, Third Party Advisory

Published

Dec 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44906Minimist <=1.2.5 is vulnerable to Prototype Pollution via fi…9.8
• CVE-2021-44907Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-44908SailsJS Sails.js <=1.4.0 is vulnerable to Prototype Pollutio…9.8
• CVE-2021-44911XE before 1.11.6 is vulnerable to Unrestricted file upload v…5.4
• CVE-2021-44912In XE 1.116, when uploading the Normal button, there is no r…5.4
• CVE-2021-44915Taocms 3.0.2 was discovered to contain a blind SQL injection…7.2
• CVE-2021-44917A Divide by Zero vulnerability exists in gnuplot 5.4 in the …5.5
• CVE-2021-44918A Null Pointer Dereference vulnerability exists in gpac 1.1.…5.5
• CVE-2021-44919A Null Pointer Dereference vulnerability exists in the gf_sg…5.5
• CVE-2021-44920An invalid memory address dereference vulnerability exists i…5.5
• CVE-2021-44921A null pointer dereference vulnerability exists in gpac 1.1.…5.5
• CVE-2021-44922A null pointer dereference vulnerability exists in gpac 1.1.…5.5