VULNERABILITY INTELLIGENCE

CVE-2021-22500

CVSS score6.5 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2021-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references