CVE-2021-38124

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	ArcSight Enterprise Security Manager (ESM).	ArcSight ESM versions 7.0.2 through 7.5.

References

Timeline

Published: Sep 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-381259.8Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer version CVE-2021-381266.1Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The CVE-2021-381276.1Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The CVE-2021-381293.3Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. Th CVE-2021-38136.5Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.CVE-2021-381306.5A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1.CVE-2021-381316.1Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.CVE-2021-381329.8Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2 CVE-2021-381336.5Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2 CVE-2021-381346.1Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.CVE-2021-381359.8Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.CVE-2021-381366.5Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splun