Micro Focus vulnerabilities

Products

• Network Automation 8
• Service Manager 8
• Enterprise Developer, Micro Focus Enterprise Server 7
• Netiq Access Manager 7
• Solutions Business Manager 7
• Arcsight Management Center 6
• Solutions Business Manager 11.4 5
• Arcsight Logger 4
• Solutions Business Manager (sbm) 4
• Dimensions Cm 3
• Filr 3
• Hp Arcsight Esm 3
• Hp Arcsight Esm Express 3
• Netiq Imanager 3
• Operation Bridge Manager 3
• Application Performance Management 2
• Content Manager 2
• Data Center Automation Containerized Suite 2
• Fortify Software Security Center (ssc) 2
• Hybrid Cloud Management 2
• Hybrid Cloud Management Containerized Suite 2
• Arcsight Logger 2
• Netiq Self Service Password Reset. 2
• Service Manager 2
• Visibroker 2
• Netiq Edirectory 9.1 Sp2 2
• Netiq Identity Manager 2
• Network Operations Management (nom) Suite Cdf 2
• Network Operations Management Ultimate 2
• Operation Bridge (containerized) 2
• Operations Bridge Containerized Suite 2
• Project And Portfolio Management Center 2
• Secure Messaging Gateway 2
• Service Management Automation Suite 2
• Ucmdb Browser 2
• Universal Cmdb 2

Newest

• micro focus arcsight management center Micro Focus ArcSight Management Center Remote Vulnerability CVE-2020-25835 5.9 MediumDecember 9, 2023
• github enterprise server, micro focus cobol server, enterprise developer +2 more +4 more Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265. CVE-2023-32265 7.1 HighJuly 20, 2023
• micro focus dimensions cm Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 CVE-2023-32263 Fix available 2.6 LowJuly 19, 2023
• micro focus dimensions cm Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 CVE-2023-32262 Fix available 4.3 MediumJuly 19, 2023
• micro focus dimensions cm Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3 CVE-2023-32261 Fix available 4.2 MediumJuly 19, 2023
• micro focus netiq imanager, netiq imanager +1 more XSS vulnerabilities in iManager CVE-2022-38758 7.2 HighJanuary 25, 2023
• micro focus netiq identity manager, netiq identity manager +1 more File existence disclosue vulnerability in IDM plugin CVE-2022-26329 1.8 LowJanuary 24, 2023
• microfocus zenworks, micro focus zenworks asset management, zenworks configuration management (zcm) +2 more +4 more CVE-2022-38757 ZENworks CVE-2022-38757 7.2 HighDecember 23, 2022
• micro focus groupwise web, microfocus groupwise +1 more CVE-2022-38756 vulnerability in GW Web prior to 18.4.2 CVE-2022-38756 4.3 MediumDecember 16, 2022
• micro focus operations bridge manager, operations bridge- containerized, microfocus operations bridge +2 more CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS) CVE-2022-38754 8.0 HighDecember 8, 2022
• micro focus filr Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1 CVE-2022-38755 5.3 MediumNovember 21, 2022
• micro focus arcsight logger Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS). CVE-2022-26331 6.1 MediumAugust 31, 2022
• micro focus arcsight logger Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure. CVE-2022-26330 6.5 MediumAugust 31, 2022
• micro focus netiq access manager Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2 CVE-2022-26326 4.0 MediumMay 2, 2022
• micro focus netiq access manager Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2 CVE-2022-26325 2.9 LowMay 2, 2022
• micro focus netiq access manager, microfocus access manager +1 more Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 CVE-2021-22526 4.9 MediumSeptember 13, 2021
• micro focus netiq access manager, microfocus access manager +1 more Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 CVE-2021-22524 5.4 MediumSeptember 13, 2021
• micro focus netiq access manager, microfocus access manager +1 more Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 CVE-2021-22527 6.0 MediumSeptember 13, 2021
• micro focus netiq access manager, microfocus access manager +1 more Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1 CVE-2021-22528 8.0 HighSeptember 13, 2021
• micro focus netiq advanced authentication Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server CVE-2021-22515 4.8 MediumJuly 12, 2021
• micro focus advanced authentication, microfocus netiq advanced authentication +1 more Advanced Authentication Improper Session Management CVE-2021-22497 3.8 LowApril 12, 2021
• micro focus access manager Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager... CVE-2021-22506 In KEV EPSS 25.7% 7.5 HighMarch 26, 2021
• micro focus solutions business manager XML External Entity processing CVE-2019-18943 6.1 MediumFebruary 26, 2021
• micro focus solutions business manager Stored cross site scripting CVE-2019-18942 5.5 MediumFebruary 26, 2021
• micro focus solutions business manager Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are... CVE-2019-18944 4.9 MediumFebruary 26, 2021
• micro focus solutions business manager privilege escalation CVE-2019-18945 7.3 HighFebruary 26, 2021
• micro focus solutions business manager information disclosure CVE-2019-18947 3.5 LowFebruary 26, 2021
• micro focus solutions business manager Session fixation CVE-2019-18946 4.8 MediumFebruary 26, 2021
• micro focus operation bridge reporter (obr), microfocus operation bridge reporter +1 more Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product,... CVE-2021-22502 In KEVPublic exploit EPSS 96.7% 9.8 CriticalFebruary 8, 2021
• micro focus netiq identity manager, microfocus identity manager +1 more NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection... CVE-2020-25839 9.8 CriticalNovember 20, 2020
• micro focus idol Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version... CVE-2020-25833 4.8 MediumNovember 17, 2020
• micro focus filr Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1... CVE-2020-25832 5.4 MediumNovember 17, 2020
• micro focus arcsight logger Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all... CVE-2020-11851 Public exploit 9.8 CriticalNovember 17, 2020
• micro focus arcsight logger Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version... CVE-2020-11860 6.1 MediumNovember 17, 2020
• micro focus arcsight logger Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1.... CVE-2020-25834 5.4 MediumNovember 17, 2020
• micro focus operation bridge (containerized), operation bridge manager, microfocus operations bridge +1 more +3 more Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products. CVE-2020-11858 Public exploit 7.8 HighOctober 27, 2020
• micro focus application performance management, operation bridge (containerized), operation bridge manager +2 more +4 more Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products. CVE-2020-11854 Public exploit EPSS 74.4% 9.8 CriticalOctober 27, 2020
• micro focus application performance management, data center automation, hybrid cloud management +7 more +9 more Arbitrary code execution vulnerability on multiple Micro Focus products CVE-2020-11853 Public exploit EPSS 77.0% 8.8 HighOctober 22, 2020
• micro focus arcsight esm (when arcsight fusion, arcsight interset, arcsight investigate. versions +8 more +10 more Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products. CVE-2020-11844 10.0 CriticalMay 29, 2020
• micro focus service manager Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9... CVE-2019-11662 4.3 MediumSeptember 18, 2019
• micro focus service manager Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30,... CVE-2019-11661 8.3 HighSeptember 18, 2019
• micro focus service manager Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32,... CVE-2019-11664 6.5 MediumSeptember 18, 2019
• micro focus service manager Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager... CVE-2019-11663 6.5 MediumSeptember 18, 2019
• micro focus service manager Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35,... CVE-2019-11665 7.5 HighSeptember 17, 2019
• micro focus service manager Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30,... CVE-2019-11666 8.8 HighSeptember 17, 2019
• micro focus service manager Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9... CVE-2019-11667 7.5 HighSeptember 17, 2019
• micro focus service manager Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This... CVE-2019-11669 7.5 HighSeptember 10, 2019
• micro focus content manager Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This... CVE-2019-11658 4.3 MediumAugust 29, 2019
• micro focus verastream host integrator A path traversal vulnerability has been identified in Verastream Host Integrator CVE-2019-11654 8.6 HighAugust 23, 2019
• micro focus self service password reset (sspr), microfocus netiq self service password reset +1 more A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR... CVE-2019-11652 9.8 CriticalAugust 14, 2019
• Show olderLoading…