CyberSec.Space Logo
Back to CVE Browser

CVE-2021-22498

HIGH
8.1
CVSS Severity Score
EPSS Score0.1430%
EPSS Percentile34.84th
PublishedJan 19, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.

Affected Platforms (CPE)

📦
Microfocus

Application Lifecycle Management

>= 12.50 and <= 12.60
📦
Microfocus

Application Lifecycle Management

>= 15.0.0 and <= 15.0.1
📦
Microfocus

Application Lifecycle Management

= 12.60
📦
Microfocus

Application Lifecycle Management

= 12.60
📦
Microfocus

Application Lifecycle Management

= 12.60
📦
Microfocus

Application Lifecycle Management

= 12.60
📦
Microfocus

Application Lifecycle Management

= 12.60
📦
Microfocus

Application Lifecycle Management

= 15.0.1
📦
Microfocus

Application Lifecycle Management

= 15.0.1
📦
Microfocus

Application Lifecycle Management

= 15.5

References & Advisories

🔗 https://softwaresupport.softwaregrp.com/doc/KM03771781
🔗 https://softwaresupport.softwaregrp.com/doc/KM03771781

Related Vulnerabilities

CVE-2019-185729.8

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Aut...

CVE-2013-48109.8

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management...

CVE-2013-48347.5

Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remote attacke...

CVE-2013-48367.5

Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Applic...