What’s Vulnerable › Vulnerabilities

CVE-2021-41825

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-08 · updated 2026-06-17
• Weakness: CWE-79

Description

Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter.

Affected products

• Verint Workforce Optimization: 15.2.5.1033

References

• https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af
• https://www.verint.com/engagement/our-offerings/solutions/workforce-optimization/
• https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af
• https://www.verint.com/engagement/our-offerings/solutions/workforce-optimization/

Get alerted when CVE-2021-41825 or the next vulnerability affects your stack