CVE-2021-45024

Critical · CVSS 9.8

ASG-Zena Cross Platform Server Enterprise Edition — XML External Entity (XXE) Injection

CVSS: 9.8; nvd
EPSS: 1.32%; 67th pct
KEV: No
Class: other; CWE-611

Description

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity (XXE).

Search profile — drives PoC discovery

Symbols ASG-ZenaCross Platform ServerXXEXML External EntityCWE-611

Keywords CVE-2021-45024ASG-Zena XXEASG Zena Cross Platform Server XXERocket Software ASG XXEASG-Zena Enterprise Edition exploitASG-Zena 4.2.1 vulnerabilityCWE-611 ASG Zena

Versions: 4.2.1

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

cptsticky/zena needs review

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z