CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42136

A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows remote attackers to execute JavaScript code in the client's browser by storing said code as a Missing Data Code value. This can then be leveraged to execute a Cross-Site Request Forgery attack to escalate privileges to administrator.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 81.7%

CVSS Severity

CVSS v3 Score 9.0

CVSS v2 Score 3.5

References

Products affected by CVE-2021-42136

Vanderbilt » Redcap » Version: N/A

cpe:2.3:a:vanderbilt:redcap:-
Vanderbilt » Redcap » Version: 10.0

cpe:2.3:a:vanderbilt:redcap:10.0
Vanderbilt » Redcap » Version: 10.0.1

cpe:2.3:a:vanderbilt:redcap:10.0.1
Vanderbilt » Redcap » Version: 10.0.2

cpe:2.3:a:vanderbilt:redcap:10.0.2
Vanderbilt » Redcap » Version: 10.0.20

cpe:2.3:a:vanderbilt:redcap:10.0.20
Vanderbilt » Redcap » Version: 10.0.3

cpe:2.3:a:vanderbilt:redcap:10.0.3
Vanderbilt » Redcap » Version: 10.1.0

cpe:2.3:a:vanderbilt:redcap:10.1.0
Vanderbilt » Redcap » Version: 10.1.1

cpe:2.3:a:vanderbilt:redcap:10.1.1
Vanderbilt » Redcap » Version: 10.1.2

cpe:2.3:a:vanderbilt:redcap:10.1.2
Vanderbilt » Redcap » Version: 10.1.3

cpe:2.3:a:vanderbilt:redcap:10.1.3
Vanderbilt » Redcap » Version: 10.1.4

cpe:2.3:a:vanderbilt:redcap:10.1.4
Vanderbilt » Redcap » Version: 10.1.5

cpe:2.3:a:vanderbilt:redcap:10.1.5
Vanderbilt » Redcap » Version: 10.2.0

cpe:2.3:a:vanderbilt:redcap:10.2.0
Vanderbilt » Redcap » Version: 10.2.1

cpe:2.3:a:vanderbilt:redcap:10.2.1
Vanderbilt » Redcap » Version: 10.2.2

cpe:2.3:a:vanderbilt:redcap:10.2.2
Vanderbilt » Redcap » Version: 10.2.3

cpe:2.3:a:vanderbilt:redcap:10.2.3
Vanderbilt » Redcap » Version: 10.3.0

cpe:2.3:a:vanderbilt:redcap:10.3.0
Vanderbilt » Redcap » Version: 10.3.1

cpe:2.3:a:vanderbilt:redcap:10.3.1
Vanderbilt » Redcap » Version: 10.3.2

cpe:2.3:a:vanderbilt:redcap:10.3.2
Vanderbilt » Redcap » Version: 10.3.3

cpe:2.3:a:vanderbilt:redcap:10.3.3
Vanderbilt » Redcap » Version: 10.3.4

cpe:2.3:a:vanderbilt:redcap:10.3.4
Vanderbilt » Redcap » Version: 10.3.5

cpe:2.3:a:vanderbilt:redcap:10.3.5
Vanderbilt » Redcap » Version: 10.3.6

cpe:2.3:a:vanderbilt:redcap:10.3.6
Vanderbilt » Redcap » Version: 10.3.7

cpe:2.3:a:vanderbilt:redcap:10.3.7
Vanderbilt » Redcap » Version: 10.3.8

cpe:2.3:a:vanderbilt:redcap:10.3.8
Vanderbilt » Redcap » Version: 10.4.0

cpe:2.3:a:vanderbilt:redcap:10.4.0
Vanderbilt » Redcap » Version: 10.6.0

cpe:2.3:a:vanderbilt:redcap:10.6.0
Vanderbilt » Redcap » Version: 4.14.0

cpe:2.3:a:vanderbilt:redcap:4.14.0
Vanderbilt » Redcap » Version: 4.14.1

cpe:2.3:a:vanderbilt:redcap:4.14.1
Vanderbilt » Redcap » Version: 4.14.2

cpe:2.3:a:vanderbilt:redcap:4.14.2
Vanderbilt » Redcap » Version: 4.14.3

cpe:2.3:a:vanderbilt:redcap:4.14.3
Vanderbilt » Redcap » Version: 4.14.4

cpe:2.3:a:vanderbilt:redcap:4.14.4
Vanderbilt » Redcap » Version: 7.0.0

cpe:2.3:a:vanderbilt:redcap:7.0.0
Vanderbilt » Redcap » Version: 7.0.11

cpe:2.3:a:vanderbilt:redcap:7.0.11
Vanderbilt » Redcap » Version: 7.5.0

cpe:2.3:a:vanderbilt:redcap:7.5.0
Vanderbilt » Redcap » Version: 8.0

cpe:2.3:a:vanderbilt:redcap:8.0
Vanderbilt » Redcap » Version: 8.10.0

cpe:2.3:a:vanderbilt:redcap:8.10.0
Vanderbilt » Redcap » Version: 8.10.1

cpe:2.3:a:vanderbilt:redcap:8.10.1
Vanderbilt » Redcap » Version: 8.10.10

cpe:2.3:a:vanderbilt:redcap:8.10.10
Vanderbilt » Redcap » Version: 8.10.11

cpe:2.3:a:vanderbilt:redcap:8.10.11
Vanderbilt » Redcap » Version: 8.10.12

cpe:2.3:a:vanderbilt:redcap:8.10.12
Vanderbilt » Redcap » Version: 8.10.13

cpe:2.3:a:vanderbilt:redcap:8.10.13
Vanderbilt » Redcap » Version: 8.10.14

cpe:2.3:a:vanderbilt:redcap:8.10.14
Vanderbilt » Redcap » Version: 8.10.15

cpe:2.3:a:vanderbilt:redcap:8.10.15
Vanderbilt » Redcap » Version: 8.10.16

cpe:2.3:a:vanderbilt:redcap:8.10.16
Vanderbilt » Redcap » Version: 8.10.17

cpe:2.3:a:vanderbilt:redcap:8.10.17
Vanderbilt » Redcap » Version: 8.10.18

cpe:2.3:a:vanderbilt:redcap:8.10.18
Vanderbilt » Redcap » Version: 8.10.2

cpe:2.3:a:vanderbilt:redcap:8.10.2
Vanderbilt » Redcap » Version: 8.10.3

cpe:2.3:a:vanderbilt:redcap:8.10.3
Vanderbilt » Redcap » Version: 8.10.4

cpe:2.3:a:vanderbilt:redcap:8.10.4
Vanderbilt » Redcap » Version: 8.10.5

cpe:2.3:a:vanderbilt:redcap:8.10.5
Vanderbilt » Redcap » Version: 8.10.6

cpe:2.3:a:vanderbilt:redcap:8.10.6
Vanderbilt » Redcap » Version: 8.10.7

cpe:2.3:a:vanderbilt:redcap:8.10.7
Vanderbilt » Redcap » Version: 8.10.8

cpe:2.3:a:vanderbilt:redcap:8.10.8
Vanderbilt » Redcap » Version: 8.10.9

cpe:2.3:a:vanderbilt:redcap:8.10.9
Vanderbilt » Redcap » Version: 8.11.5

cpe:2.3:a:vanderbilt:redcap:8.11.5
Vanderbilt » Redcap » Version: 8.11.6

cpe:2.3:a:vanderbilt:redcap:8.11.6
Vanderbilt » Redcap » Version: 8.6.0

cpe:2.3:a:vanderbilt:redcap:8.6.0
Vanderbilt » Redcap » Version: 8.6.1

cpe:2.3:a:vanderbilt:redcap:8.6.1
Vanderbilt » Redcap » Version: 8.6.2

cpe:2.3:a:vanderbilt:redcap:8.6.2
Vanderbilt » Redcap » Version: 8.6.3

cpe:2.3:a:vanderbilt:redcap:8.6.3
Vanderbilt » Redcap » Version: 8.6.4

cpe:2.3:a:vanderbilt:redcap:8.6.4
Vanderbilt » Redcap » Version: 8.6.5

cpe:2.3:a:vanderbilt:redcap:8.6.5
Vanderbilt » Redcap » Version: 8.7.0

cpe:2.3:a:vanderbilt:redcap:8.7.0
Vanderbilt » Redcap » Version: 8.7.1

cpe:2.3:a:vanderbilt:redcap:8.7.1
Vanderbilt » Redcap » Version: 8.7.2

cpe:2.3:a:vanderbilt:redcap:8.7.2
Vanderbilt » Redcap » Version: 8.7.3

cpe:2.3:a:vanderbilt:redcap:8.7.3
Vanderbilt » Redcap » Version: 8.7.4

cpe:2.3:a:vanderbilt:redcap:8.7.4
Vanderbilt » Redcap » Version: 8.8.0

cpe:2.3:a:vanderbilt:redcap:8.8.0
Vanderbilt » Redcap » Version: 8.8.1

cpe:2.3:a:vanderbilt:redcap:8.8.1
Vanderbilt » Redcap » Version: 8.8.2

cpe:2.3:a:vanderbilt:redcap:8.8.2
Vanderbilt » Redcap » Version: 8.9.0

cpe:2.3:a:vanderbilt:redcap:8.9.0
Vanderbilt » Redcap » Version: 8.9.1

cpe:2.3:a:vanderbilt:redcap:8.9.1
Vanderbilt » Redcap » Version: 8.9.2

cpe:2.3:a:vanderbilt:redcap:8.9.2
Vanderbilt » Redcap » Version: 8.9.3

cpe:2.3:a:vanderbilt:redcap:8.9.3
Vanderbilt » Redcap » Version: 9.0

cpe:2.3:a:vanderbilt:redcap:9.0
Vanderbilt » Redcap » Version: 9.1

cpe:2.3:a:vanderbilt:redcap:9.1
Vanderbilt » Redcap » Version: 9.1.2

cpe:2.3:a:vanderbilt:redcap:9.1.2
Vanderbilt » Redcap » Version: 9.10.0

cpe:2.3:a:vanderbilt:redcap:9.10.0
Vanderbilt » Redcap » Version: 9.2.0

cpe:2.3:a:vanderbilt:redcap:9.2.0
Vanderbilt » Redcap » Version: 9.2.1

cpe:2.3:a:vanderbilt:redcap:9.2.1
Vanderbilt » Redcap » Version: 9.2.2

cpe:2.3:a:vanderbilt:redcap:9.2.2
Vanderbilt » Redcap » Version: 9.2.3

cpe:2.3:a:vanderbilt:redcap:9.2.3
Vanderbilt » Redcap » Version: 9.2.4

cpe:2.3:a:vanderbilt:redcap:9.2.4
Vanderbilt » Redcap » Version: 9.2.5

cpe:2.3:a:vanderbilt:redcap:9.2.5
Vanderbilt » Redcap » Version: 9.3.0

cpe:2.3:a:vanderbilt:redcap:9.3.0
Vanderbilt » Redcap » Version: 9.3.1

cpe:2.3:a:vanderbilt:redcap:9.3.1
Vanderbilt » Redcap » Version: 9.3.2

cpe:2.3:a:vanderbilt:redcap:9.3.2
Vanderbilt » Redcap » Version: 9.3.3

cpe:2.3:a:vanderbilt:redcap:9.3.3
Vanderbilt » Redcap » Version: 9.3.4

cpe:2.3:a:vanderbilt:redcap:9.3.4
Vanderbilt » Redcap » Version: 9.5.1

cpe:2.3:a:vanderbilt:redcap:9.5.1
Vanderbilt » Redcap » Version: 9.5.2

cpe:2.3:a:vanderbilt:redcap:9.5.2
Vanderbilt » Redcap » Version: 9.6.0

cpe:2.3:a:vanderbilt:redcap:9.6.0
Vanderbilt » Redcap » Version: 9.6.1

cpe:2.3:a:vanderbilt:redcap:9.6.1
Vanderbilt » Redcap » Version: 9.6.2

cpe:2.3:a:vanderbilt:redcap:9.6.2
Vanderbilt » Redcap » Version: 9.6.3

cpe:2.3:a:vanderbilt:redcap:9.6.3
Vanderbilt » Redcap » Version: 9.6.4

cpe:2.3:a:vanderbilt:redcap:9.6.4
Vanderbilt » Redcap » Version: 9.6.5

cpe:2.3:a:vanderbilt:redcap:9.6.5
Vanderbilt » Redcap » Version: 9.7.0

cpe:2.3:a:vanderbilt:redcap:9.7.0
Vanderbilt » Redcap » Version: 9.7.1

cpe:2.3:a:vanderbilt:redcap:9.7.1
Vanderbilt » Redcap » Version: 9.7.2

cpe:2.3:a:vanderbilt:redcap:9.7.2
Vanderbilt » Redcap » Version: 9.7.3

cpe:2.3:a:vanderbilt:redcap:9.7.3
Vanderbilt » Redcap » Version: 9.7.4

cpe:2.3:a:vanderbilt:redcap:9.7.4
Vanderbilt » Redcap » Version: 9.7.5

cpe:2.3:a:vanderbilt:redcap:9.7.5
Vanderbilt » Redcap » Version: 9.7.6

cpe:2.3:a:vanderbilt:redcap:9.7.6
Vanderbilt » Redcap » Version: 9.7.7

cpe:2.3:a:vanderbilt:redcap:9.7.7
Vanderbilt » Redcap » Version: 9.7.8

cpe:2.3:a:vanderbilt:redcap:9.7.8
Vanderbilt » Redcap » Version: 9.8.0

cpe:2.3:a:vanderbilt:redcap:9.8.0
Vanderbilt » Redcap » Version: 9.8.1

cpe:2.3:a:vanderbilt:redcap:9.8.1
Vanderbilt » Redcap » Version: 9.8.2

cpe:2.3:a:vanderbilt:redcap:9.8.2
Vanderbilt » Redcap » Version: 9.8.3

cpe:2.3:a:vanderbilt:redcap:9.8.3
Vanderbilt » Redcap » Version: 9.8.4

cpe:2.3:a:vanderbilt:redcap:9.8.4
Vanderbilt » Redcap » Version: 9.8.5

cpe:2.3:a:vanderbilt:redcap:9.8.5
Vanderbilt » Redcap » Version: 9.9.0

cpe:2.3:a:vanderbilt:redcap:9.9.0
Vanderbilt » Redcap » Version: 9.9.1

cpe:2.3:a:vanderbilt:redcap:9.9.1
Vanderbilt » Redcap » Version: 9.9.2

cpe:2.3:a:vanderbilt:redcap:9.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42136

Products

Pricing

Contact Us