Micro Focus Data Protector vulnerabilities

3 CVEs affecting Micro Focus Data Protector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22517, published 2021-08-05.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11660, published 2019-09-13. High severity, CVSS 7.8. EPSS: 7.8% chance of exploitation in the next 30 days. Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to…
• CVE-2019-3476, published 2019-03-25. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.
• CVE-2021-22517, published 2021-08-05. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70,…