CVE-2021-22516

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: Jun 4, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-225178.8A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects ver CVE-2021-225185.5A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This im CVE-2021-225199.8Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018 CVE-2021-22528.1Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Loan Details, Loan Accounting Events). Supported versions t CVE-2021-225216.7A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 CVE-2021-225227.1Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier v CVE-2021-225237.6XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulner CVE-2021-225244.9Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 CVE-2021-225255.5This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1 CVE-2021-225266.1Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 CVE-2021-225277.5Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 CVE-2021-225285.4Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4