Vulnerability · Published Jan 19, 2021 · Assigned by microfocus
CVE-2021-22498
High 8.1
In plain English
A high-severity security flaw in Application Lifecycle Management ( Previously known as Quality Center ).. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)1.0%top 37.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Application Lifecycle Management ( Previously known as Quality Center ). | Affected versions are: 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. |
References
- https://softwaresupport.softwaregrp.com/doc/KM03771781 x_refsource_MISC