VYPR
← All advisories
High severity8.1NVD Advisory· Published Jan 19, 2021· Updated Jun 17, 2026

CVE-2021-22498

CVE-2021-22498

Description

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Microfocus/Application LifeCycle Management10 versions
    cpe:2.3:a:microfocus:application_lifecycle_management:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:microfocus:application_lifecycle_management:*:*:*:*:*:*:*:*range: >=12.50,<=12.60
    • cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch1:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch2:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch3:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch4:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch5:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:15.0.1:patch1:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:15.0.1:patch2:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:application_lifecycle_management:15.5:*:*:*:*:*:*:*
    • (no CPE)range: <=12.60 Patch 5, <=15.0.1 Patch 2, <=15.5
  • Micro Focus/Application Lifecycle Managementdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.