Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Nov 17, 2021

High
CISA KEVEPSS 10.5%

CVE-2021-22506

Micro FocusMicro Focus Access Manager

Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.

EPSS — Exploit Probability

10.5%

Higher than 93.2% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2021-22506

Vulnerability Overview

Severity
High
EPSS
10.5%
CISA KEV
Yes
Ransomware
Unknown
Published
Nov 3, 2021
KEV Added
Nov 3, 2021
Due Date
Nov 17, 2021
Related Articles
0

Vendor

Micro Focus

Micro Focus Access Manager