CVE-2021-38123

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-09-07 · updated 2026-06-17
Weakness: CWE-601

Description

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.

Affected products

Micro Focus Network Automation: 10.40, 10.50, 2018.05, 2018.11, 2019.05, 2020.02 (+3)

References

https://portal.microfocus.com/s/article/KM000001673
https://portal.microfocus.com/s/article/KM000001673

Get alerted when CVE-2021-38123 or the next vulnerability affects your stack