CVE-2021-22498

Name of the Vulnerable Software and Affected Versions Micro Focus Application Lifecycle Management versions 12.x through 15.5 Micro Focus Application Lifecycle Management versions 12.60 Patch 5 and earlier Micro Focus Application Lifecycle Management versions 15.0.1 Patch 2 and earlier

Description The issue is related to an XML External Entity Injection, which could be exploited to allow an XML External Entity Injection.

Recommendations For versions 12.x through 15.5, update to a version later than 15.5. For versions 12.60 Patch 5 and earlier, apply a patch later than Patch 5. For versions 15.0.1 Patch 2 and earlier, apply a patch later than Patch 2.