CVE-2021-22499: Micro Focus Application Performance Management

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack.

Affected products

• Micro Focus Application Performance Management: version 9.40 only; version 9.50 only; version 9.51 only

Published 2021-02-06. Last modified 2026-06-17.