CVE-2021-22500

6.5 mediumEPSS 0.5%

Medium (6.5) in microfocus application performance management. EPSS 0.5% chance of exploitation in the next 30 days.

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:application_performance_management

References

https://softwaresupport.softwaregrp.com/doc/KM03775253
https://softwaresupport.softwaregrp.com/doc/KM03775253

Check your stack JSON