How severe is CVE-2021-21514?

CVE-2021-21514 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2021-21514 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2021-21514?

CVE-2021-21514 affects Dell Openmanage Server Administrator. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2021-21514?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2021-21514 published?

CVE-2021-21514 was published on 2021-03-02 and last updated on 2026-06-17.

CVE-2021-21514

CVE-2021-21514 is a medium-severity vulnerability in Dell Openmanage Server Administrator with a CVSS 3.x base score of 4.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-22.

Key facts

Severity: Medium (CVSS 3.x base score 4.9)
CVSS v2: 4.0
EPSS exploit prediction: 5% (92nd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-22
Affected product: Dell Openmanage Server Administrator
Published: 2021-03-02
Last modified: 2026-06-17

Description

Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request.

Frequently asked questions

What is CVE-2021-21514?: Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request.
How severe is CVE-2021-21514?: CVE-2021-21514 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2021-21514 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2021-21514?: CVE-2021-21514 affects Dell Openmanage Server Administrator. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2021-21514?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2021-21514 published?: CVE-2021-21514 was published on 2021-03-02 and last updated on 2026-06-17.

References

https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities

Affected products (1)

cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*

More vulnerabilities in Dell Openmanage Server Administrator

CVE-2021-21513 — High (CVSS 8.6): Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server…
CVE-2026-81442 — High (CVSS 8.1): Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management…
CVE-2026-81478 — High (CVSS 8.1): Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key…
CVE-2026-81476 — High (CVSS 8.1): Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special…
CVE-2026-81475 — High (CVSS 8.1): Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical…
CVE-2026-81474 — High (CVSS 7.8): Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability.…

All CVEs affecting Dell Openmanage Server Administrator →

Other CWE-22 (Path Traversal) vulnerabilities

CVE-2026-55393 — Critical (CVSS 10.0): Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9…
CVE-2026-97163 — Critical (CVSS 10.0): Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVE-2026-80155 — Critical (CVSS 10.0): Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1,…
CVE-2026-70200 — Critical (CVSS 10.0): Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an…
CVE-2026-85706 — Critical (CVSS 10.0): GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9,…
CVE-2026-76606 — Critical (CVSS 10.0): Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.

Browse all CWE-22 (Path Traversal) vulnerabilities →