CVE-2021-22519

CRITICAL 9.8CVE-2021-22519 · Published 28/05/2021 · updated 17/06/2026

In short

CVE-2021-22519 is a CRITICAL (CVSS 9.8) vulnerability affecting sitescope (microfocus).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sitescope microfocus	`= 11.40= 11.41= 11.50= 11.51= 11.60= 11.70= 11.80= 11.90= 11.91= 11.92= 11.93`	No fix yet

Description

Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.

References

softwaresupport.softwaregrp.com/doc/KM03811028

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free