« Volver al listado

CVE-2021-22523

Estado: ModificadaAlta (7.6)—

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Verastream Host Integrator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-22523",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.6,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Verastream Host Integrator.",
          "versions": [
            {
              "status": "affected",
              "version": "Version 7.8 Update 1 and earlier versions."
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-07-22T12:15:07.860",
  "references": [
    {
      "url": "https://support.microfocus.com/kb/doc.php?id=7025169",
      "source": "security@opentext.com"
    },
    {
      "url": "https://support.microfocus.com/kb/doc.php?id=7025169",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad detipo XML External Entity en Micro Focus Verastream Host Integrator, que afecta a versión 7.8 Update 1 y versiones anteriores. La vulnerabilidad podría permitir el control del navegador web y el secuestro de las sesiones de usuarios"
    }
  ],
  "lastModified": "2026-06-17T03:37:22.657",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:verastream_host_integrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEFF02F7-6FB9-4305-9097-BB0BE2016BDF",
              "versionEndExcluding": "7.8"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:verastream_host_integrator:7.8:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F96A212-C29E-4036-82BB-3B2113A54146"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:verastream_host_integrator:7.8:update_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA9455D6-A1ED-4472-9850-8D168E46931C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}