CVE-2021-22523

Severity: high (CVSS 7.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-22 · updated 2026-06-17
Weakness: CWE-611

Description

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions.

Affected products

Verastream Host Integrator.: before 7.8; 7.8, 7.8-update_1 — fixed in 7.8

How to fix

Upgrade to a fixed version: Verastream Host Integrator. 7.8. Check the vendor advisory for mitigations.

References

https://support.microfocus.com/kb/doc.php?id=7025169
https://support.microfocus.com/kb/doc.php?id=7025169

Get alerted when CVE-2021-22523 or the next vulnerability affects your stack