CVE-2021-28171

CRITICAL

Vangene deltaFlow E-platform - Privilege Escalation

Title source: llm
STIX 2.1

Description

The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.

References (2)

Scores

CVSS v3 9.8
EPSS 0.0027
EPSS Percentile 50.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-522 CWE-565
Status published
Products (1)
deltaflow_project/deltaflow 4.0 - 7.7
Published Apr 06, 2021
Tracked Since Feb 18, 2026