CVE-2021-22530

9.9 criticalEPSS 0.2%

Critical (9.9) in microfocus netiq advanced authentication. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWEs: CWE-307, CWE-667
Published: 2024-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:netiq_advanced_authentication

References

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html

Check your stack JSON