CVE-2021-22514 — Code Injection in Application Performance Management

CWE-94 — Code Injection3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
1.8%
top 17.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microfocus Application Performance Management
Timeline
PublishedApr 28
Latest updateMay 24

Description

An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-2pvm-p3x6-gxvp: An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9↗2022-05-24
▶
CVEList
CVE-2021-22514: An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9↗2021-04-28
▶
CVE-2021-22514 — Code Injection | cvebase