https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-28250.htmlhttps://patchthecve.com/cve/CVE-2021-28250.htmlWed, 17 Jun 2026 03:46:06 +0000HIGH 7.8: CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth user. NOTE: This vulnerability only affects products that arehttps://patchthecve.com/cve/CVE-2021-28249.htmlhttps://patchthecve.com/cve/CVE-2021-28249.htmlWed, 17 Jun 2026 03:46:06 +0000HIGH 8.8: CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is run. https://patchthecve.com/cve/CVE-2021-28247.htmlhttps://patchthecve.com/cve/CVE-2021-28247.htmlWed, 17 Jun 2026 03:46:05 +0000MEDIUM 5.4: CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticated remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and perform a Reflected Cross-Site Scripting attack against the pl