← Vulnerability feed

Vulnerability record · CVE-2021-22514 · published 28 April 2021

CVE-2021-22514: Microfocus application performance management vulnerability

Microfocus · Application Performance Management

An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM.

9.8 CVSS 3.1 Critical EPSS 2.0% · top 20.0%
9.8CVSS 3.1 base score, v2 7.5
2.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://softwaresupport.softwaregrp.com/doc/KM03806649
https://softwaresupport.softwaregrp.com/doc/KM03806649

Track CVE-2021-22514 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-11854Micro Focus Operations Bridge and APM hard-coded credentials allow remote code executionMicro Focus Operations Bridge Manager, Operations Bridge (containerized) and Application Performance Management contain a hard-coded credentials flaw…EPSS 74%analysed8.8CVE-2020-11853Micro Focus enterprise products remote code execution flawCVE-2020-11853 is an arbitrary code execution vulnerability affecting a broad set of Micro Focus products, including Operations Bridge Manager, Unive…EPSS 77%analysed6.5CVE-2021-22500Microfocus application performance management cross-site request forgery vulnerabilityCross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulne…EPSS 0.48%4.8CVE-2021-22499Microfocus application performance management cross-site scripting vulnerabilityPersistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The …EPSS 0.61%

Source: NIST National Vulnerability Database (record CVE-2021-22514), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.