Micro Focus Verastream Host Integrator vulnerabilities

4 CVEs affecting Micro Focus Verastream Host Integrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22523, published 2021-07-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11654, published 2019-08-23. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.
CVE-2020-11842, published 2020-05-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an…
CVE-2021-22523, published 2021-07-22. High severity, CVSS 7.6. EPSS: 0.8% chance of exploitation in the next 30 days. XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and…
CVE-2021-22522, published 2021-07-22. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of…