PT-2021-4279

🗓️ 09 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

CKEditor 4.14.0–4.16.x has an HTML Data Processor XSS flaw; update to 4.16.1+ or disable it.

Reporter	Title	Published	Views	Family All 211
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in CKEditor 4.19	29 Aug 202519:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2020-28500, CVE-2021-23337, CVE-2020-8203	24 Apr 202315:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in CKEditor library affects IBM Engineering Test Management (ETM) (CVE-2021-32809, CVE-2021-37695)	21 Sep 202309:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2020-28500, CVE-2021-23337, CVE-2020-8203	24 Apr 202314:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CKEditor Vulnerabilities Affect IBM Control Center	14 May 202121:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal CKEditor (CVE-2021-33829)	25 Aug 202117:32	–	ibm
IBM Security Bulletins	Security Bulletin: B2B API of IBM Sterling B2B Integrator vulnerable to multiple issues due to CKEditor	3 Jan 202315:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10	29 Jul 202522:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal (CVE-2021-33829)	24 Aug 202118:41	–	ibm

Source	Link
ckeditor	www.ckeditor.com/blog/ckeditor-4.16.1-with-accessibility-enhancements/
ubuntu	www.ubuntu.com/security/CVE-2021-33829
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WAGNWHFIQAVCP537KFFS2A2GDG66J7XD
ubuntu	www.ubuntu.com/security/CVE-2020-9281
cve	www.cve.org/CVERecord
security-tracker	www.security-tracker.debian.org/tracker/DLA-2813-1
packages	www.packages.debian.org/src:ckeditor3
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T
osv	www.osv.dev/vulnerability/USN-5340-1

18 Dec 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.1 - 7.6

CVSS 24.3

CVSS 36.1

EPSS0.65532