CVE-2021-28250

7.8 highEPSS 0.3%

High (7.8) in ca ehealth performance manager. EPSS 0.3% chance of exploitation in the next 30 days.

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2021-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ca:ehealth_performance_manager

References

https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/
https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/

Check your stack JSON