CVE-2021-22505
high-risk
Published 2021-04-13
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent.
Do I need to act?
-
0.88% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (12)
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Operations Agent
Affected Vendors
52
/ 100
high-risk
Severity
32/34 · Critical
Exploitability
3/34 · Minimal
Exposure
17/34 · Moderate