CVE-2021-38124: Micro Focus Arcsight Enterprise Security Manager

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.

Affected products

• Micro Focus Arcsight Enterprise Security Manager: from 7.0.2, up to and including 7.5

Published 2021-09-28. Last modified 2026-06-17.