CVE-2021-38124 — Command Injection in Arcsight Enterprise Security Manager

CWE-77 — Command Injection3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
2.1%
top 15.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microfocus Arcsight Enterprise Security Manager
Timeline
PublishedSep 28
Latest updateMay 24

Description

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8h4p-539g-p5p9: Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7↗2022-05-24
▶
CVEList
CVE-2021-38124: Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7↗2021-09-28
▶
CVE-2021-38124 — Command Injection | cvebase