https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-22523.htmlhttps://patchthecve.com/cve/CVE-2021-22523.htmlWed, 17 Jun 2026 03:37:22 +0000HIGH 7.6: XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions.https://patchthecve.com/cve/CVE-2021-22522.htmlhttps://patchthecve.com/cve/CVE-2021-22522.htmlWed, 17 Jun 2026 03:37:22 +0000HIGH 7.1: Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data.https://patchthecve.com/cve/CVE-2020-11842.htmlhttps://patchthecve.com/cve/CVE-2020-11842.htmlWed, 17 Jun 2026 02:50:53 +0000HIGH 7.5: Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view.https://patchthecve.com/cve/CVE-2019-11654.htmlhttps://patchthecve.com/cve/CVE-2019-11654.htmlWed, 17 Jun 2026 02:13:21 +0000HIGH 7.5: Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files.https://patchthecve.com/cve/CVE-2013-3626.htmlhttps://patchthecve.com/cve/CVE-2013-3626.htmlTue, 16 Jun 2026 23:55:31 +0000HIGH 9.3: Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.