« Volver al listado

CVE-2021-22519

Estado: ModificadaCrítica (9.8)—

Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Sitescope

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-22519",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "SiteScope",
          "versions": [
            {
              "status": "affected",
              "version": "11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60),  2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-05-28T20:15:07.693",
  "references": [
    {
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03811028",
      "source": "security@opentext.com"
    },
    {
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03811028",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de código arbitrario ejecutado en el producto Micro Focus SiteScope, que afecta a las versiones 11.40,11.41, 2018.05 (11.50), 2018.08 (11.51), 2018.11 (11.60), 2019.02 (11.70), 2019.05 (11.80), 2019.08 (11.90), 2019.11 (11.91) , 2020.05 (11.92), 2020.10 (11.93). La vulnerabilidad podría permitir a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de SiteScope"
    }
  ],
  "lastModified": "2026-06-17T03:37:22.347",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DE9E5DB-EF55-4F1A-8918-DEADF8BF292B"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.41:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A9B9D39-A74C-4160-A663-073BE09B73BD"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C625969D-6FE4-4F94-A72C-57FDE6F37E41"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D5D6D93-735E-47A0-B54A-A6E58747E404"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F2AD960-A180-4A48-98EB-7E460937202A"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.70:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "976975CE-00EC-4290-B3BD-F85513256A84"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.80:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "784832E1-E920-4772-AB70-D2521D29A06C"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.90:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD1CFDF9-18C3-474F-91FE-0BD5937F2932"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.91:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76CCE193-6309-437E-B6A5-C9E1680B3036"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.92:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "918839F0-7968-4A64-A7B7-758B4EE40EF3"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:sitescope:11.93:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3A6D352-F851-428C-89D9-6338476B88BC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}