VulnerabilityModified

CVE-2021-38124

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5.

CRITICAL 9.8EPSS 2.08%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.08%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 2.08% probability · 80th percentile
CISA KEV: Not listed
Weakness: CWE-77
Affected: microfocus/arcsight enterprise security manager
Source: security@opentext.com

References

https://portal.microfocus.com/s/article/KM000001960
https://portal.microfocus.com/s/article/KM000001960

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.