{"id":"CVE-2019-11666","aliases":["EUVD-2019-3336","GHSA-vrhg-jgfj-7rxw"],"status":"published","title":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30,...","description":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01177,"percentile":0.67845,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-502"],"published":"2019-09-17T18:52:03Z","modified":"2026-06-17T02:13:22Z","products":[{"vendor":"micro focus","product":"service manager"},{"vendor":"microfocus","product":"service_manager"},{"vendor":"opentext™","product":"service manager"}],"references":[{"url":"https://softwaresupport.softwaregrp.com/doc/KM03518316","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11666"},{"url":"https://github.com/advisories/GHSA-vrhg-jgfj-7rxw"}],"sources":{"cve":[{"id":"CVE-2019-11666","description":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.","status":"published","published":"2019-09-17T18:52:03Z","modified":"2024-08-04T23:03:31.614Z","updated_at":"2026-11-02T14:32:22.432545Z"}],"euvd":[{"id":"EUVD-2019-3336","description":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.","status":"published","published":"2019-09-17T18:52:03Z","modified":"2024-08-04T23:03:31Z","updated_at":"2026-11-03T02:40:48.505669Z"}],"ghsa":[{"id":"GHSA-vrhg-jgfj-7rxw","title":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30,...","description":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.","status":"published","published":"2022-05-24T16:56:20Z","modified":"2024-04-04T01:57:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:56:04.496643Z"}],"nvd":[{"id":"CVE-2019-11666","description":"Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data.","status":"published","published":"2019-09-17T19:15:10.697Z","modified":"2026-06-17T02:13:22.45Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:05:28.126831Z"}]}}