{"vulnerability": "CVE-2021-3812", "sightings": [{"uuid": "c7ab307f-9f95-4743-9ec5-3627aad4ae85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38126", "type": "seen", "source": "https://t.me/cibsecurity/35588", "content": "\u203c CVE-2021-38126 \u203c\n\nPotential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-14T22:19:46.000000Z"}, {"uuid": "085b34fa-3dd9-4e0f-a830-0b94fab24769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38121", "type": "seen", "source": "https://t.me/cvedetector/4312", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2021-38121 - \"NetIQ Advance Authentication Weak TLS Protocol\"\", \n  \"Content\": \"CVE ID : CVE-2021-38121 \nPublished : Aug. 28, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.\u00a0 This issue affects NetIQ Advance Authentication versions before 6.3.5.1 \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-28T10:06:58.000000Z"}, {"uuid": "fd569522-9370-4297-b385-8802578a4cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38120", "type": "seen", "source": "https://t.me/cvedetector/4311", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2021-38120 - NetIQ Advance Authentication Bash Command Injection\", \n  \"Content\": \"CVE ID : CVE-2021-38120 \nPublished : Aug. 28, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper  \nhandling in provided\u00a0command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-28T10:06:57.000000Z"}, {"uuid": "84b34a5d-3df9-4e39-9f7a-faf84b282e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38122", "type": "seen", "source": "https://t.me/cvedetector/4309", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2021-38122 - NetIQ Advance Authentication Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2021-38122 \nPublished : Aug. 28, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information.  \nThis issue affects NetIQ Advance Authentication before 6.3.5.1 \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-28T10:06:55.000000Z"}, {"uuid": "c810fd8c-b6ff-460a-9fd5-6ed78dfa914f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3812", "type": "seen", "source": "https://t.me/cibsecurity/29026", "content": "\u203c CVE-2021-3812 \u203c\n\nadminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-17T12:23:20.000000Z"}, {"uuid": "73249302-95aa-4baa-bc09-e1592b8d08d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38124", "type": "seen", "source": "https://t.me/cibsecurity/29567", "content": "\u203c CVE-2021-38124 \u203c\n\nRemote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-28T18:35:56.000000Z"}, {"uuid": "a18d51e1-a379-4efa-855e-7778d21f26b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38123", "type": "seen", "source": "https://t.me/cibsecurity/28376", "content": "\u203c CVE-2021-38123 \u203c\n\nOpen Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T20:17:31.000000Z"}]}