CVE-2021-22522

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-22 · updated 2026-06-17
Weakness: CWE-79

Description

Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data.

Affected products

Verastream Host Integrator.: before 7.8; 7.8, 7.8-update_1 — fixed in 7.8

How to fix

Upgrade to a fixed version: Verastream Host Integrator. 7.8. Check the vendor advisory for mitigations.

References

https://support.microfocus.com/kb/doc.php?id=7025169
https://support.microfocus.com/kb/doc.php?id=7025169

Get alerted when CVE-2021-22522 or the next vulnerability affects your stack