peter bassill · operator
$ cve CVE-2021-45090 JSON

CVE-2021-45090

9.8
CRITICAL · CVSS 3.1 · EPSS 2.9% (pctl 87)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Stormshield Endpoint Security before 2.1.2 allows remote code execution.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.93% — more likely to be exploited than 87% of all CVEs
On CISA KEVno
Public exploitnone known
Published2021-12-21
Last modified2026-06-17

Affected (1)

VendorProduct
stormshieldendpoint security

References

→ the Explorer  ·  watch your stack  ·  NVD