VDB
CVE-2021-22926
CVE-2021-22926
PUBLISHED
CVSS 8.699999809265137 HIGH
FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.
EPSS 0.66% · 71.5th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.66%
71.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk Splunk Enterprise <9.0.5 | |
| IBM | IBM DB2 | |
| Splunk | Splunk Splunk Enterprise <9.0.9 | |
| Atlassian | Atlassian Confluence <10.1.1 | |
| Splunk | Splunk Splunk Enterprise <8.2.12 | |
| Gentoo | Gentoo Linux | |
| Xerox | Xerox FreeFlow Print Server 9 | |
| Oracle | Oracle Linux | |
| NetApp | NetApp Data ONTAP | |
| Splunk | Splunk Splunk Enterprise <9.1.1 | |
| Atlassian | Atlassian Confluence <8.5.25 | |
| Atlassian | Atlassian Confluence <9.2.7 | |
| Dell | Dell Data Protection Advisor <19.12 | |
| Splunk | Splunk Splunk Enterprise <8.2.11 | |
| Splunk | Splunk Splunk Enterprise | |
| Atlassian | Atlassian Confluence <10.0.2 | |
| Splunk | Splunk Splunk Enterprise <9.2.1 | |
| Dell | Dell NetWorker < 19.9.0.1 | |
| Splunk | Splunk Splunk Enterprise <9.0.6 | |
| SUSE | SUSE Linux |
…and 4 more
Exploit Intelligence
- https://hackerone.com/reports/1234760 (nist-nvd)
- CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure Transport (hackerone)
- CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure Transport (hackerone)
- CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure Transport (hackerone)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
- CVE-2025-38062.yara (github-yara)
Timeline
- CVE Published
- Jul 21, 2021 PoC Published
- Aug 6, 2021 EPSS Score
- Sep 2, 2021 EPSS Score
- Oct 4, 2021 EPSS Score
- Oct 9, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Jan 30, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 27, 2022 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-2354.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2354 advisory
- https://www.dell.com/support/kbdoc/de-de/000215497/dsa-2023-233-security-update-for-dell-networker-curl-7-51-0 advisory
- https://curl.se/docs/CVE-2021-22926.html advisory
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22926 advisory
- https://security.netapp.com/advisory/ntap-20210902-0003/ advisory
- https://security.gentoo.org/glsa/202212-01 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0302.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0302 advisory
- https://securitydocs.business.xerox.com/wp-content/uploads/2022/06/Xerox-Security-Bulletin-XRX22-013-FreeFlow-Print-Server-v9.pdf advisory
- https://securitydocs.business.xerox.com/wp-content/uploads/2022/06/Xerox-Security-Bulletin-XRX22-012-FreeFlow-Printer.pdf advisory
- https://security.business.xerox.com/wp-content/uploads/2022/06/Xerox-Security-Bulletin-XRX22-015-FreeFlow-Print-Server-v7.pdf advisory
- https://security.business.xerox.com/wp-content/uploads/2023/04/Xerox-Security-Bulletin-XRX23-005-Xerox%25C2%25AE-FreeFlow%25C2%25AE-Print-Server-v9.pdf advisory
- https://security.business.xerox.com/wp-content/uploads/2025/10/Xerox-Security-Bulletin-XRX25-017-for-Xerox-FreeFlow-Print-Server-v9.pdf advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0432.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0432 advisory
- https://security.business.xerox.com/wp-content/uploads/2022/06/Xerox-Security-Bulletin-XRX22-014-FreeFlow-Print-Server-v9.pdf advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1350.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1350 advisory
- https://advisory.splunk.com/advisories/SVD-2023-0613 advisory
…and 20 more