CVE-2021-22498
HIGH
8.1
CVSS Severity Score
Vulnerability Description
XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.
Affected Platforms (CPE)
📦
Microfocus
Application Lifecycle Management
>= 12.50 and <= 12.60📦
Microfocus
Application Lifecycle Management
>= 15.0.0 and <= 15.0.1📦
Microfocus
Application Lifecycle Management
= 12.60📦
Microfocus
Application Lifecycle Management
= 12.60📦
Microfocus
Application Lifecycle Management
= 12.60📦
Microfocus
Application Lifecycle Management
= 12.60📦
Microfocus
Application Lifecycle Management
= 12.60📦
Microfocus
Application Lifecycle Management
= 15.0.1📦
Microfocus
Application Lifecycle Management
= 15.0.1📦
Microfocus