CVE-2021-22517

A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data.

• https://portal.microfocus.com/s/article/KM000001460
• https://portal.microfocus.com/s/article/KM000001460

Published

Aug 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22511Improper Certificate Validation vulnerability in Micro Focus…6.5
• CVE-2021-22512Cross-Site Request Forgery (CSRF) vulnerability in Micro Foc…6.5
• CVE-2021-22513Missing Authorization vulnerability in Micro Focus Applicati…6.5
• CVE-2021-22514An arbitrary code execution vulnerability exists in Micro Fo…9.8
• CVE-2021-22515Multi-Factor Authentication (MFA) functionality can be bypas…6.5
• CVE-2021-22516Insertion of Sensitive Information into Log File vulnerabili…7.5
• CVE-2021-22518A vulnerability identified in OpenText™ Identity Manager Az…5.5
• CVE-2021-22519Execute arbitrary code vulnerability in Micro Focus SiteScop…9.8
• CVE-2021-2252Vulnerability in the Oracle Loans product of Oracle E-Busine…8.1
• CVE-2021-22521A privileged escalation vulnerability has been identified in…6.7
• CVE-2021-22522Reflected Cross-Site Scripting vulnerability in Micro Focus …7.1
• CVE-2021-22523XML External Entity vulnerability in Micro Focus Verastream …7.6