What’s Vulnerable › Vulnerabilities

CVE-2021-3824

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-23 · updated 2026-06-17
• Weakness: CWE-84

Description

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.

Affected products

• OpenVPN Access Server: from 2.9.0 through 2.9.4

References

• https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-9-5
• https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-9-5

Get alerted when CVE-2021-3824 or the next vulnerability affects your stack