CVE-2021-22519: Critical severity micro focus sitescope vulnerability

Published May 28, 2021

Updated

Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.

Affected Software

11 affected components

Microfocus Sitescope=11.40

Microfocus Sitescope=11.41

Microfocus Sitescope=11.50

Microfocus Sitescope=11.51

Microfocus Sitescope=11.60

Microfocus Sitescope=11.70

Microfocus Sitescope=11.80

Microfocus Sitescope=11.90

Microfocus Sitescope=11.91

Microfocus Sitescope=11.92

Microfocus Sitescope=11.93

Event History

May 28, 2021

CVE Published

via MITRE·07:22 PM

Data Sourced

via MITRE·07:22 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2021-22519?

CVE-2021-22519 is a vulnerability in the Micro Focus SiteScope product that allows for the execution of arbitrary code.

Which versions of Micro Focus SiteScope are affected by CVE-2021-22519?

Versions 11.40 through 11.93 of Micro Focus SiteScope are affected by CVE-2021-22519.

How severe is CVE-2021-22519?

CVE-2021-22519 has a severity rating of 9.8, which is classified as critical.

How can CVE-2021-22519 be exploited?

CVE-2021-22519 can be exploited by remote attackers to execute arbitrary code.

Is there a fix for CVE-2021-22519?

To fix CVE-2021-22519, it is recommended to update Micro Focus SiteScope to a version that is not affected by the vulnerability.