What is CVE-2021-22500?

CVE-2021-22500 is a medium-severity vulnerability in Microfocus Application_performance_management, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2021-02-06.

How severe is CVE-2021-22500?

Medium severity. CVSS v3 base score is 6.5 out of 10.

CSRF in Microfocus Application_performance_management

CVE-2021-22500

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the a…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (38.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Microfocus Application_performance_management — versions 9.40, 9.50, 9.51
N/a Application Performance Management — versions 9.40, 9.50, 9.51

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2021-22500?: CVE-2021-22500 is a medium-severity vulnerability in Microfocus Application_performance_management, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2021-02-06.
How severe is CVE-2021-22500?: Medium severity. CVSS v3 base score is 6.5 out of 10.