by Kastro
Paper/Archive/CVE-2021-22514

CVE-2021-22514

microfocus — An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.8.808 × 2016.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM.

Affected

ProductAffectedFixed inSource
Application Performance Management (APM)Micro Focus Application Performance Management 9.40, 9.50 and 9.51–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsoftwaresupport.softwaregrp.com/doc/KM03806649