CVE-2021-22500

Published: Feb 6, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.

Affected (3)

Products: Microfocus: Application Performance Management

Microfocus

1 product

Application Performance Management

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microfocus Application Performance Management	Version 9.40
Microfocus Application Performance Management	Version 9.50
Microfocus Application Performance Management	Version 9.51

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://softwaresupport.softwaregrp.com/doc/KM03775253

Source: security@opentext.com

https://softwaresupport.softwaregrp.com/doc/KM03775253

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.