CVE-2021-38130
Last modified
CVE-2021-38130 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack.. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Voltage Securemail | < 7.3.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-38130?
How severe is CVE-2021-38130?
How do I fix CVE-2021-38130?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-38124Remote Code Execution vulnerability in Micro Focus ArcSight …9.8
- CVE-2021-38125Unauthenticated remote code execution in Micro Focus Operati…9.8
- CVE-2021-38126Potential vulnerabilities have been identified in Micro Focu…6.1
- CVE-2021-38127Potential vulnerabilities have been identified in Micro Focu…6.1
- CVE-2021-38129Escalation of privileges vulnerability in Micro Focus in Mic…3.3
- CVE-2021-3813Improper Privilege Management in GitHub repository chatwoot/…6.5
- CVE-2021-38131Possible Cross-Site Scripting (XSS) Vulnerability in eDirec…6.1
- CVE-2021-38132Possible External Service Interaction attack in eDirectory…9.8
- CVE-2021-38133Possible External Service Interaction attack in eDirectory…6.5
- CVE-2021-38134Possible XSS in iManager URL for access Component has been d…6.1
- CVE-2021-38135Possible External Service Interaction attack in iManager h…9.8
- CVE-2021-38136Corero SecureWatch Managed Services 9.7.2.0020 is affected b…6.5
Are you affected by CVE-2021-38130?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST