CVE-2021-22498

8.1 highEPSS 1.0%

High (8.1) in microfocus application lifecycle management. EPSS 1.0% chance of exploitation in the next 30 days.

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:application_lifecycle_management

References

https://softwaresupport.softwaregrp.com/doc/KM03771781
https://softwaresupport.softwaregrp.com/doc/KM03771781

Check your stack JSON