VulnerabilityModified

CVE-2021-22500

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51.

MEDIUM 6.5EPSS 0.48%

Does this matter?

Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.

Description

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS: 0.48% probability · 40th percentile
CISA KEV: Not listed
Weakness: CWE-352
Affected: microfocus/application performance management
Source: security@opentext.com

References

https://softwaresupport.softwaregrp.com/doc/KM03775253
https://softwaresupport.softwaregrp.com/doc/KM03775253

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.