by Kastro
Paper/Archive/CVE-2021-38124

CVE-2021-38124

microfocus — Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 81.5.815 × 2016.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.

Affected

ProductAffectedFixed inSource
ArcSight Enterprise Security Manager (ESM).ArcSight ESM versions 7.0.2 through 7.5.–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refportal.microfocus.com/s/article/KM000001960